Tracker / Kenya / 2025 / Diamond Trust Bank Kenya Limited; Diamon
§ Tracker · Kenya · ODPC · 2025
Diamond Trust Bank Kenya Limited; Diamond Trust Bank Uganda Limited
Both respondents found liable; 1st respondent (dtb kenya) ordered to pay kes 250,000 and 2nd respondent (dtb uganda) kes 250,000 compensation to the complainant; enforcement notice issued to the 2nd respondent. ODPC, November 2025. month-precision date
improper disclosure of a third party's financial data, loss of the data subject's access to her own bank statements and notifications
Provisions cited
s.8(1)(f) DPA 2019, s.56 DPA 2019, s.65 DPA 2019, Reg. 14 Data Protection (Complaints Handling Procedure and Enforcement) Regulations 2021, Reg. 32 / Reg. 34 Data Protection (General) Regulations 2021
Outcome
both respondents found liable; 1st respondent (DTB Kenya) ordered to pay KES 250,000 and 2nd respondent (DTB Uganda) KES 250,000 compensation to the complainant; enforcement notice issued to the 2nd respondent
In a cross-border matter, Kenya's ODPC (Complaint No. 1244 of 2025, complainant Aaditi Rajput) found Diamond Trust Bank Kenya and Diamond Trust Bank Uganda liable for the improper disclosure of a third party's financial data to the complainant, who consequently lost access to her own DTB statements and notifications from May 2025. The Data Commissioner ordered each respondent to pay KES 250,000 compensation (KES 500,000 in total) and issued an enforcement notice to DTB Uganda. Determination dated November 2025 at Nairobi.
CROSS-BORDER · BANKING · IMPROPER DISCLOSURE · RIGHT OF ACCESS
Cite this decision
ODPC (Kenya), ODPC Complaint No. 1244 of 2025, determination of November 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/rajput-v-diamond-trust-bank-cross-border-disclosure/ (accessed 22 July 2026).