Abdul Karim Osiche v Fin Africa t/a Trustgro SCA Limited

Complaint upheld; compensation ordered. ODPC, June 2025.

Record ID

ke-odpc-2025-0036

Case reference

ODPC Complaint No. 0320 of 2025

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Complainant

Abdul Karim Osiche

Date decided

June 2025

Respondent type

private

Sector

digital lending

Violations

unauthorised image/photo use, unlawful data disclosure, unlawful processing, failure to implement security measures

Provisions cited

s.25 DPA 2019, s.26(a) DPA 2019, s.30 DPA 2019, s.31 DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.65(4) DPA 2019, s.65 DPA 2019

Outcome

complaint upheld; compensation ordered

Compensation

KES 150,000 (≈ USD 1,160 at the decision date)

Status

final

Source

Official document ↗

Source integrity

SHA-256 c4633a3ead6ab060…

Record verified

30 July 2026

The facts

The complainant alleged that a staff member of Fin Africa, trading as Trustgro SCA Limited, shared his personal information by email with a third-party contact centre, a bank; the shared information included his employment contract, pay slip, bank account statement and an M-Pesa loan statement. The ODPC found the respondent liable for violating his right to be informed and unlawfully processing his personal data. His prayer for a formal written apology was declined as not a remedy contemplated under the regulations.

Orders and outcome

The respondent was found liable and ordered to pay the complainant Kenya Shillings One Hundred and Fifty Thousand (KES 150,000) as compensation. Dated June 2025.

DATA-SECURITY · DISCLOSURE · FINTECH · MOBILE-LENDING · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Same respondent

• 10 June 2025 · complaint upheld

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.