The complainant alleged that Geosky Service Limited, without authorisation, used his personal data in a tender application to the Central Bank of Kenya, misrepresenting him as its employee and including his professional membership details to enhance the bid's credibility. He learned of the use only when the Central Bank, during due diligence, sought verification from the Institution of Surveyors of Kenya. The ODPC found the respondent used his personal data without a lawful basis and denied him the opportunity to exercise his right to be informed.
Orders and outcome
The respondent was ordered to pay the complainant Kenya Shillings Four Hundred and Fifty thousand (KES 450,000) as compensation, an enforcement notice was issued, and a recommendation for prosecution was made against the directors of the respondent company. Dated 2025.
ODPC (Kenya), Ayub Odanya Naburi v Geosky Service Limited, ODPC Complaint No. 1844 of 2024, determination of March 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/geosky-service-limited/ (accessed 30 August 2026).