Philip Bollo v Platinum Credit Limited

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, 17 January 2025.

Record ID: ke-odpc-2025-0015
Case reference: ODPC Complaint No. 1673 of 2024
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Philip Bollo
Date decided: 17 January 2025
Respondent type: private
Sector: digital lending
Violations: lack of consent, commercial use of personal data, failure to prevent data breach, failure to respond to erasure request, unlawful processing, failure to implement security measures
Provisions cited: s.25 DPA 2019, s.26(c) DPA 2019, s.30 DPA 2019, s.32 DPA 2019, s.37 DPA 2019, s.37(1) DPA 2019, s.40(1)(b) DPA 2019, s.41(1) DPA 2019, s.42(2) DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.65(4) DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered; enforcement notice issued
Compensation: KES 900,000 (≈ USD 6,980 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 1a51d73010695037…
Record verified: 30 July 2026

The facts

The complainant alleged that Platinum Credit Limited constantly sent him unsolicited text messages and calls promoting its loan products without obtaining his consent. The ODPC found the respondent liable for using his personal data for commercial purposes without express consent and for violating his right to object and his right of erasure.

Orders and outcome

The respondent was found liable, an enforcement notice was issued, and it was ordered to pay the complainant Kenya Shillings nine hundred thousand (KES 900,000) as compensation. Dated 17 January 2025.

CONSENT · DATA-BREACH · DATA-SECURITY · FINTECH · MOBILE-LENDING · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Philip Bollo v Platinum Credit Limited, ODPC Complaint No. 1673 of 2024, determination of 17 January 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/platinum-credit-limited-2/ (accessed 30 August 2026).

Same respondent

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.