Caroline Wanjiku Kioni v Nairobi Hospital

Complaint upheld; compensation ordered; enforcement notice conditional. ODPC, 16 December 2025.

Record ID

ke-odpc-2026-0017

Case reference

ODPC Complaint No. 1147 of 2025

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Complainant

Caroline Wanjiku Kioni

Date decided

16 December 2025

Respondent type

private

Sector

healthcare

Violations

unauthorised image/photo use, lack of consent, commercial use of personal data, unlawful processing

Provisions cited

s.25 DPA 2019, s.30 DPA 2019, s.32 DPA 2019, s.37 DPA 2019, s.56 DPA 2019, s.65 DPA 2019

Outcome

complaint upheld; compensation ordered; enforcement notice conditional

Compensation

KES 500,000 (≈ USD 3,880 at the decision date)

Status

final

Source

Official document ↗

Source integrity

SHA-256 d3bfe24ae03eb251…

Record verified

30 July 2026

The facts

The complainant alleged that The Nairobi Hospital used her personal data for advertisement and commercial purposes. The ODPC found the hospital did not obtain valid consent from her for the use of her image commercially.

Orders and outcome

The respondent was found liable, ordered to compensate the complainant KES 500,000, and ordered to delete the advertisements containing her personal data from all its online platforms with proof to the Office within fourteen days, failing which an enforcement notice would issue. Dated 16 December 2025.

CONSENT · HEALTHCARE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.