Tracker / Kenya / 2025 / Mycredit
§ Tracker · Kenya · ODPC · 2025

Timothy Murithi Kaung'u v Mycredit

Complaint upheld; compensation ordered. ODPC, August 2025.

Record ID
ke-odpc-2025-0074
Case reference
ODPC Complaint No. 0766 of 2025
Jurisdiction
Kenya
Regulator
ODPC
Type
determination
Complainant
Timothy Murithi Kaung'u
Date decided
August 2025
Respondent type
private
Sector
general
Violations
lack of consent, commercial use of personal data, failure to respond to erasure request, unlawful processing
Provisions cited
s.25 DPA 2019, s.26 DPA 2019, s.26(c) DPA 2019, s.30 DPA 2019, s.36 DPA 2019, s.37 DPA 2019, s.37(1) DPA 2019, s.56(1) DPA 2019, s.65 DPA 2019
Outcome
complaint upheld; compensation ordered
Compensation
KES 50,000 (≈ USD 390 at the decision date)
Status
final
Source
Official document ↗
Source integrity
SHA-256 6f819cbffda5abe2…
Record verified
30 July 2026

The facts

The complainant, the registered user of a personal mobile line, alleged he kept receiving unsolicited promotional messages and calls from Mycredit Limited despite raising concerns that were ignored. The ODPC found his right to object was infringed and his data was used for commercial purposes, and noted the respondent had since deleted his data from its system.

Orders and outcome

The respondent was found liable and ordered to pay the complainant Kenya Shillings Fifty Thousand (KES 50,000) as compensation. Dated August 2025.

CONSENT · GENERAL · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Timothy Murithi Kaung'u v Mycredit, ODPC Complaint No. 0766 of 2025, determination of August 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/mycredit/ (accessed 30 August 2026).

Same respondent


Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.