AK v Stanbic Bank

Complaint upheld; compensation ordered. ODPC, July 2025.

Record ID

ke-odpc-2025-0082

Case reference

ODPC Complaint No. 0626 of 2025

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Complainant

AK

Date decided

July 2025

Respondent type

private

Sector

banking

Violations

failure to respond to erasure request, unlawful processing

Provisions cited

s.25 DPA 2019, s.26 DPA 2019, s.40 DPA 2019, s.56 DPA 2019, s.65 DPA 2019

Outcome

complaint upheld; compensation ordered

Compensation

KES 50,000 (≈ USD 390 at the decision date)

Status

final

Source

Official document ↗

Source integrity

SHA-256 29bd7728454e9394…

Record verified

30 July 2026

The facts

The complainant lodged a request for erasure of his personal data with Stanbic Bank Kenya Limited, but the bank ignored or refused to erase it and he continued receiving SMS communications. The ODPC found the bank violated his right to erasure and deletion, while noting substantial mitigation: the bank updated its records and systems on 14 May 2025, re-engineered its complaints handling process for privacy issues, ran refresher training on data subject rights for staff handling complaints, and implemented monthly monitoring of privacy complaints.

Orders and outcome

The respondent was found liable and ordered to compensate the complainant KES 50,000. In view of the mitigation measures implemented, the Office expressly declined to issue an enforcement notice. Dated 30 July 2025.

BANKING · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.