Rcmrd

Complaint dismissed. ODPC, October 2025.

Record ID

ke-odpc-2025-0081

Case reference

ODPC Complaint No. 0568 of 2025

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Date decided

October 2025

Respondent type

private

Sector

general

Violations

unlawful data disclosure, failure to respond to erasure request, unlawful processing

Provisions cited

s.25 DPA 2019, s.30 DPA 2019, s.56 DPA 2019, s.58 DPA 2019

Outcome

complaint dismissed

Status

final

Source

Official document ↗

Source integrity

SHA-256 70be17ee20bb7bcf…

Record verified

30 July 2026

The facts

An anonymous complainant alleged that the Regional Centre for Mapping of Resources for Development processed his personal information, including name, gender, date of birth, national ID number, KRA PIN and phone number, unlawfully and without his knowledge through datasets on a geoportal. The respondent removed the datasets from the site so that searches would yield no results, and formally instructed its GIS section to conform to data protection guidelines before uploading datasets. The Office confirmed the measures were implemented.

Orders and outcome

The complaint was dismissed and the Office stated that an enforcement notice shall not issue against the respondent in view of the mitigation measures implemented. Dated 2025, with the day and month illegible in the scan.

DISCLOSURE · DISMISSED · GENERAL · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.