Mwikali Nzyoka v Kenya Women Microfinance Bank (KWFT), Family Bank and Co-operative Bank of Kenya

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, May 2025.

Record ID

ke-odpc-2025-0028

Case reference

ODPC Complaint No. 0105 of 2025

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Complainant

Mwikali Nzyoka

Date decided

May 2025

Respondent type

private

Sector

banking

Violations

failure to prevent data breach, failure to respond to erasure request, unlawful processing

Provisions cited

s.25 DPA 2019, s.26(a) DPA 2019, s.30 DPA 2019, s.56(1) DPA 2019, s.65 DPA 2019

Outcome

complaint upheld; compensation ordered; enforcement notice issued

Compensation

KES 650,000 (≈ USD 5,040 at the decision date)

Status

final

Source

Official document ↗

Source integrity

SHA-256 44d5ad4ed6c6d132…

Record verified

30 July 2026

The facts

The complainant alleged that Kenya Women Microfinance Bank disclosed her personal information to Family Bank and the Co-operative Bank of Kenya without her consent or any lawful basis. The ODPC found all three respondents liable.

Orders and outcome

The respondents were ordered to pay the complainant a total of Kenya Shillings Six Hundred and Fifty Thousand (KES 650,000) as compensation: KES 250,000 from the first respondent and KES 200,000 from each of the second and third respondents. An enforcement notice was issued against the first respondent. Dated 2025, with the day and month partially illegible in the scan.

BANKING · DATA-BREACH · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.