The complainant alleged that Sunking Limited had been sending her unwanted messages at least two times a week consistently for the past year despite her not being its client. The ODPC found the respondent failed to inform her of the use of her personal data and kept sending messages without a lawful basis, infringing her right to be informed.
Orders and outcome
The respondent was found liable, ordered to pay the complainant Kenya Shillings Two Hundred and Fifty Thousand (Kshs. 250,000) as compensation, and an enforcement notice was issued against it. Dated 20 January 2025.
GENERAL · UNLAWFUL-PROCESSING · UPHELD
Cite this decision
ODPC (Kenya), Risper Onyango v Sunking Limited, ODPC Complaint No. 1687 of 2024, determination of 20 January 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/sunking-limited/ (accessed 23 October 2026).
Track Kenya enforcement
Free: a monthly digest of new verified decisions in your chosen jurisdictions. You confirm by email before anything is sent; every alert has an unsubscribe link. Privacy · Terms.