Bosco Otieno v Taifa DT Sacco Society Limited

Complaint upheld; compensation ordered; enforcement notice conditional. ODPC, January 2025.

Record ID

ke-odpc-2025-0020

Case reference

ODPC Complaint No. 1779 of 2024

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Complainant

Bosco Otieno

Date decided

January 2025

Respondent type

private

Sector

banking

Violations

unlawful processing

Provisions cited

s.25 DPA 2019, s.26(c) DPA 2019, s.36 DPA 2019, s.65(4) DPA 2019, s.65 DPA 2019

Outcome

complaint upheld; compensation ordered; enforcement notice conditional

Compensation

KES 250,000 (≈ USD 1,900 at the decision date)

Status

final

Source

Official document ↗

Source integrity

SHA-256 267a918eba75d1fc…

Record verified

30 July 2026

The facts

The complainant alleged he constantly received credit and debit alert messages from the Sacco although he is not one of its members. The ODPC found the respondent, intentionally or negligently, violated his right to object to the processing of his personal data, and noted that even after the Office's intervention the respondent continued sending him messages. The respondent was also directed to keep customer data accurate and up to date and to erase or rectify inaccurate data without delay.

Orders and outcome

The respondent was found liable, ordered to erase the complainant's personal data from its records within seven days and stop sending him messages, failing which an enforcement notice would issue, and ordered to pay him Kenya Shillings Two Hundred and Fifty Thousand (KES 250,000) as compensation. Dated January 2025.

BANKING · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.