Tracker / Kenya / 2025 / Diamond Trust Bank Kenya Limited; Diamon
§ Tracker · Kenya · ODPC · 2025

Aaditi Rajput v Diamond Trust Bank Kenya Limited; Diamond Trust Bank Uganda Limited

Both respondents found liable; 1st respondent (dtb kenya) ordered to pay kes 250,000 and 2nd respondent (dtb uganda) kes 250,000 compensation to the complainant; enforcement notice issued to the 2nd respondent. ODPC, November 2025.

Record ID
ke-odpc-2025-0097
Case reference
ODPC Complaint No. 1244 of 2025
Jurisdiction
Kenya
Regulator
ODPC
Type
determination
Complainant
Aaditi Rajput
Date decided
November 2025
Respondent type
private
Sector
banking
Violations
improper disclosure of a third party's financial data, loss of the data subject's access to her own bank statements and notifications
Provisions cited
s.8(1)(f) DPA 2019, s.56 DPA 2019, s.65 DPA 2019, Reg. 14 Data Protection (Complaints Handling Procedure and Enforcement) Regulations 2021, Reg. 32 / Reg. 34 Data Protection (General) Regulations 2021
Outcome
both respondents found liable; 1st respondent (DTB Kenya) ordered to pay KES 250,000 and 2nd respondent (DTB Uganda) KES 250,000 compensation to the complainant; enforcement notice issued to the 2nd respondent
Compensation
KES 500,000 (≈ USD 3,900 at the decision date)
Status
final
Source
Official document ↗
Source integrity
SHA-256 b8c184e501b5f8e4…
Record verified
31 July 2026

The facts

The complaint concerned the improper disclosure of a third party's financial information to the complainant: Diamond Trust Bank Kenya established that the third party's account statements had been sent by Diamond Trust Bank Uganda. The complainant also lost access to her own bank statements. Both respondents were found to have violated her rights.

Orders and outcome

Both respondents were found liable. The first respondent, Diamond Trust Bank Kenya Limited, and the second respondent, Diamond Trust Bank Uganda Limited, were each ordered to pay the complainant KES 250,000, and an enforcement notice was issued against the second respondent only. Dated 24 November 2025.

CROSS-BORDER · BANKING · IMPROPER DISCLOSURE · RIGHT OF ACCESS

Cite this decision

ODPC (Kenya), Aaditi Rajput v Diamond Trust Bank Kenya Limited; Diamond Trust Bank Uganda Limited, ODPC Complaint No. 1244 of 2025, determination of November 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/rajput-v-diamond-trust-bank-cross-border-disclosure/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.