Tracker / Kenya / 2025 / Kentex Cargo
§ Tracker · Kenya · ODPC · 2025

Steve Omwenga Onwonga v Kentex Cargo

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, November 2025.

Record ID
ke-odpc-2026-0012
Case reference
ODPC Complaint No. 1201 of 2025
Jurisdiction
Kenya
Regulator
ODPC
Type
determination
Complainant
Steve Omwenga Onwonga
Date decided
November 2025
Respondent type
private
Sector
general
Violations
lack of consent, commercial use of personal data, failure to respond to erasure request, unlawful processing
Provisions cited
s.25 DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.30(1) DPA 2019, s.32(2) DPA 2019, s.32(1) DPA 2019, s.34 DPA 2019, s.37(1)(a) DPA 2019, s.37 DPA 2019, s.40(1)(b) DPA 2019, s.40(2) DPA 2019, s.40(3) DPA 2019, s.56 DPA 2019, s.65(4) DPA 2019, s.65(2) DPA 2019, s.65(1) DPA 2019
Outcome
complaint upheld; compensation ordered; enforcement notice issued
Compensation
KES 400,000 (≈ USD 3,100 at the decision date)
Status
final
Source
Official document ↗
Source integrity
SHA-256 405b2102da1025c7…
Record verified
30 July 2026

The facts

The complainant alleged that Kentex Cargo collected and processed his personal data for commercial purposes without any lawful basis, and continued sending him marketing messages after he had successfully opted out, including to an alternative email address. The ODPC found the respondent processed his data for commercial purposes without a lawful basis.

Orders and outcome

The respondent was found liable, ordered to compensate the complainant KES 400,000, and an enforcement notice was issued against it. Dated November 2025.

CONSENT · GENERAL · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Steve Omwenga Onwonga v Kentex Cargo, ODPC Complaint No. 1201 of 2025, determination of November 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/kentex-cargo/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.