Lynda Namusonge Maturu v Kenya Bankers Sacco

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, 20 June 2025.

Record ID

ke-odpc-2025-0040

Case reference

ODPC Complaint No. 0456 of 2025

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Complainant

Lynda Namusonge Maturu

Date decided

20 June 2025

Respondent type

private

Sector

banking

Violations

unlawful data disclosure, unlawful processing

Provisions cited

s.25(1) DPA 2019, s.25(a) DPA 2019, s.25(b) DPA 2019, s.25 DPA 2019, s.25(D) DPA 2019, s.26(a) DPA 2019, s.26 DPA 2019, s.29 DPA 2019, s.30(1)(b) DPA 2019, s.32 DPA 2019, s.45(b) DPA 2019, s.45(c) DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.58 DPA 2019, s.65 DPA 2019

Outcome

complaint upheld; compensation ordered; enforcement notice issued

Compensation

KES 50,000 (≈ USD 390 at the decision date)

Status

final

Source

Official document ↗

Source integrity

SHA-256 da3fc0bb1e2031f1…

Record verified

30 July 2026

The facts

The complainant, a loan guarantor, alleged that Kenya Bankers Sacco shared her personal data in a single email sent to all guarantors across two separate loans with distinct guarantors, exposing personal and sensitive information including health-related details to unrelated third parties. The ODPC found the Sacco liable, while noting that her own loan arrears had precipitated the events and weighing that in the compensation.

Orders and outcome

The respondent was found liable and ordered to pay the complainant Kenya Shillings Fifty Thousand (KES 50,000) as compensation, and an enforcement notice was issued against it. Dated 20 June 2025.

BANKING · DISCLOSURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.