Glenda Aching Onyango v Stawika Capital Limited

Complaint upheld; compensation ordered. ODPC, September 2025.

Record ID: ke-odpc-2025-0084
Case reference: ODPC Complaint No. 0840 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Glenda Aching Onyango
Date decided: September 2025
Respondent type: private
Sector: general
Violations: unlawful data disclosure, failure to prevent data breach, unlawful processing
Provisions cited: s.25 DPA 2019, s.56 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered
Compensation: KES 50,000 (≈ USD 390 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 9b286e6873fc0821…
Record verified: 30 July 2026

The facts

The complainant alleged that Stawika Capital Limited, without prior notice, intentionally disclosed her personal data to third parties without any lawful basis. The ODPC found the disclosure unlawful, taking into account the nature and extent of the violation and the harm occasioned.

Orders and outcome

The respondent was found liable for unlawful disclosure and directed to compensate the complainant Kenya Shillings Fifty Thousand (Kshs. 50,000). Dated September 2025.

DATA-BREACH · DISCLOSURE · GENERAL · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Glenda Aching Onyango v Stawika Capital Limited, ODPC Complaint No. 0840 of 2025, determination of September 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/stawika/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.