Lilian Nyawira Nderitu and John Gitahi Mureithi v Josephat Karungo and Freshia Mugo Waweru

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, October 2025.

Record ID: ke-odpc-2025-0068
Case reference: ODPC Complaint No. 0596 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Lilian Nyawira Nderitu and John Gitahi Mureithi
Date decided: October 2025
Respondent type: private
Sector: general
Violations: unlawful processing
Provisions cited: s.25(a) DPA 2019, s.25 DPA 2019, s.25(c) DPA 2019, s.30(1)(b) DPA 2019, s.40(1) DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.58 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered; enforcement notice issued
Compensation: KES 200,000 (≈ USD 1,550 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 838b261022bb00e3…
Record verified: 30 July 2026

The facts

Two complainants alleged that the respondents' CCTV cameras were installed in a manner that intruded on their private residence, and that several requests to remove the surveillance were not complied with. The ODPC found the respondents' actions infringed the complainants' right to privacy and violated the data protection principles.

Orders and outcome

The respondents were found liable, ordered to pay Kenya Shillings Two Hundred Thousand (KES 200,000) as compensation, and an enforcement notice was issued. Dated 20 October 2025.

GENERAL · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Lilian Nyawira Nderitu and John Gitahi Mureithi v Josephat Karungo and Freshia Mugo Waweru, ODPC Complaint No. 0596 of 2025, determination of October 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/josephat-karungo-and-another/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.