Anthony Mwazumbi Njoroge v The Legend Hotel

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, 22 June 2025.

Record ID: ke-odpc-2025-0050
Case reference: ODPC Complaint No. 0466 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Anthony Mwazumbi Njoroge
Date decided: 22 June 2025
Respondent type: private
Sector: general
Violations: lack of consent, commercial use of personal data, failure to respond to erasure request, unlawful processing
Provisions cited: s.25(G) DPA 2019, s.25 DPA 2019, s.25(c) DPA 2019, s.26(a) DPA 2019, s.26(c) DPA 2019, s.26 DPA 2019, s.37(1) DPA 2019, s.40(1)(b) DPA 2019, s.56 DPA 2019, s.58 DPA 2019, s.65(4) DPA 2019, s.65(2) DPA 2019, s.65(1) DPA 2019
Outcome: complaint upheld; compensation ordered; enforcement notice issued
Compensation: KES 250,000 (≈ USD 1,940 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 cd69367ea5459609…
Record verified: 30 July 2026

The facts

The complainant alleged that The Legend Hotel processed his personal data for marketing purposes without a lawful basis. The ODPC found the hotel failed to uphold his rights to be informed and to object, and processed his personal data for commercial purposes without consent.

Orders and outcome

The respondent was found liable, ordered to compensate the complainant KES 250,000, and an enforcement notice was issued against it. Dated 22nd of a month illegible in the scan, 2025.

CONSENT · GENERAL · RIGHT-TO-ERASURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Anthony Mwazumbi Njoroge v The Legend Hotel, ODPC Complaint No. 0466 of 2025, determination of 22 June 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/the-legend-hotel/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.