Thika Water Co

Complaint upheld; enforcement notice issued. ODPC, October 2025. month-precision date

Record ID: ke-odpc-2025-0085
Case reference: ODPC Complaint No. 0917 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Date decided: October 2025
Respondent type: private
Sector: public services
Violations: failure to prevent data breach, unlawful processing
Provisions cited: s.25(F) DPA 2019, s.25 DPA 2019, s.26(c) DPA 2019, s.26 DPA 2019, s.40 DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.58 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; enforcement notice issued
Status: final
Source: Official document ↗
Record verified: 12 March 2026

Summary

The ODPC upheld a complaint against Thika Water Co in the public services sector concerning failure to prevent data breach, unlawful processing. The determination considers s.25(F) DPA 2019, s.25 DPA 2019, s.26(c) DPA 2019, s.26 DPA 2019. An enforcement notice was issued against the respondent.

DATA-BREACH · UNLAWFUL-PROCESSING · UPHELD · UTILITIES

Cite this decision

ODPC (Kenya), ODPC Complaint No. 0917 of 2025, determination of October 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/thika-water-co/ (accessed 22 July 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.