Pepino Pizza

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, 22 June 2025.

Record ID: ke-odpc-2025-0031
Case reference: ODPC Complaint No. 0474 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Date decided: 22 June 2025
Respondent type: private
Sector: general
Violations: lack of consent, commercial use of personal data, failure to respond to erasure request, unlawful processing
Provisions cited: s.25 DPA 2019, s.26(a) DPA 2019, s.32(1) DPA 2019, s.37(1)(a) DPA 2019, s.37(1)(b) DPA 2019, s.37 DPA 2019, s.37(1) DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.58 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered; enforcement notice issued
Compensation: KES 250,000 (≈ USD 1,900 at the decision date)
Status: final
Source: Official document ↗
Record verified: 6 July 2026

Summary

The ODPC upheld a complaint against Pepino Pizza concerning lack of consent, commercial use of personal data, failure to respond to erasure request. The determination considers s.25 DPA 2019, s.26(a) DPA 2019, s.32(1) DPA 2019, s.37(1)(a) DPA 2019. The Office ordered KES 250,000 in compensation. An enforcement notice was issued against the respondent.

CONSENT · GENERAL · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), ODPC Complaint No. 0474 of 2025, determination of 22 June 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/pepino-pizza/ (accessed 22 July 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.