The complainant alleged that Natal Tech Limited unlawfully sent multiple emails to his employer, the National Environment Management Authority, revealing his financial obligations without his explicit and informed consent. The ODPC found his right to be informed was infringed, while noting he had a loan obligation he was entitled to pay. The respondent also refused to allow a notified site visit, obstructing the Data Commissioner's investigative powers.
Orders and outcome
The respondent was found liable and ordered to pay the complainant Kenya Shillings Fifty Thousand (KES 50,000) as compensation, and a recommendation for prosecution was made against the respondent's directors for obstruction of the Data Commissioner. Dated May 2025.
ODPC (Kenya), Jimmy Owiti v Natal Tech, ODPC Complaint No. 0278 of 2025, determination of May 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/natal-tech/ (accessed 30 August 2026).