Walter Kisangi Changilwa v Lajovi Computers

Complaint upheld; compensation ordered. ODPC, December 2025.

Record ID: ke-odpc-2026-0013
Case reference: ODPC Complaint No. 1480 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Walter Kisangi Changilwa
Date decided: December 2025
Respondent type: private
Sector: general
Violations: failure to prevent data breach, unlawful processing
Provisions cited: s.25 DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered
Compensation: KES 20,000 (≈ USD 160 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 27b4fcc67a4ef97f…
Record verified: 30 July 2026

The facts

The complainant alleged that Lajovi Computers unlawfully accessed, leaked and publicly exposed a document containing his highly confidential personal data without his knowledge or consent. The ODPC found there was unauthorised disclosure by the respondent, though inadvertent.

Orders and outcome

The respondent was found liable and ordered to pay the complainant nominal compensation of Kenya Shillings Twenty Thousand (KES 20,000). Dated December 2025.

DATA-BREACH · GENERAL · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Walter Kisangi Changilwa v Lajovi Computers, ODPC Complaint No. 1480 of 2025, determination of December 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/lajovi/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.