Simon Muoki Muindi v Cooperative Bank and Image Registrars Limited

Complaint dismissed. ODPC, October 2025.

Record ID: ke-odpc-2025-0067
Case reference: ODPC Complaint No. 0665 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Simon Muoki Muindi
Date decided: October 2025
Respondent type: private
Sector: general
Violations: unauthorised image/photo use, commercial use of personal data, unlawful data disclosure, failure to respond to erasure request, unlawful processing, failure to implement security measures
Provisions cited: s.25 DPA 2019, s.26(a) DPA 2019, s.30 DPA 2019, s.30(1)(b) DPA 2019, s.30(1) DPA 2019, s.41 DPA 2019, s.56(1) DPA 2019
Outcome: complaint dismissed
Status: final
Source: Official document ↗
Source integrity: SHA-256 3393831b7780aff9…
Record verified: 30 July 2026

The facts

The complainant alleged he received a series of unsolicited emails on 8 May 2025 inviting him to attend the bank's annual general meeting, sent without his consent by the bank's agent. The ODPC found the respondents had a lawful basis for the processing and that, despite technical issues, his personal data was not used in any way beyond calling the AGM.

Orders and outcome

The complaint against both the first and second respondents was dismissed. Dated 2025, with the month OCR-illegible.

DATA-SECURITY · DISCLOSURE · DISMISSED · GENERAL · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING

Cite this decision

ODPC (Kenya), Simon Muoki Muindi v Cooperative Bank and Image Registrars Limited, ODPC Complaint No. 0665 of 2025, determination of October 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/image-registars/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.