Joan Njoki Kamau v National Bank Of Kenya

Complaint upheld; compensation ordered. ODPC, 24 October 2025.

Record ID: ke-odpc-2026-0018
Case reference: ODPC Complaint No. 1063 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Joan Njoki Kamau
Date decided: 24 October 2025
Respondent type: private
Sector: banking
Violations: failure to respond to erasure request, unlawful processing
Provisions cited: s.25 DPA 2019, s.56 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered
Compensation: KES 200,000 (≈ USD 1,550 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 880d6789644a0cb3…
Record verified: 30 July 2026

The facts

The complainant alleged that National Bank of Kenya unlawfully disclosed her confidential financial personal data to third parties without her consent. The ODPC found the bank processed her personal data unlawfully.

Orders and outcome

The respondent was found liable and ordered to pay the complainant Kenya Shillings Two Hundred Thousand (KES 200,000) as compensation. Dated 24 October 2025.

BANKING · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Joan Njoki Kamau v National Bank Of Kenya, ODPC Complaint No. 1063 of 2025, determination of 24 October 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/national-bank-of-kenya/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.