Stephen Ngatia Maina v Whitepath

Complaint upheld; compensation ordered. ODPC, 2 July 2025.

Record ID: ke-odpc-2025-0052
Case reference: ODPC Complaint No. 0520 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Stephen Ngatia Maina
Date decided: 2 July 2025
Respondent type: private
Sector: digital lending
Violations: unlawful debt collection, unlawful processing
Provisions cited: s.25 DPA 2019, s.26 DPA 2019, s.26(c) DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered
Compensation: KES 50,000 (≈ USD 390 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 8e10efcbedc67619…
Record verified: 30 July 2026

The facts

The complainant alleged infringement of his rights by Whitepath Company Limited in the course of debt-recovery contact. The ODPC found his rights to be informed and to object were infringed, but noted the respondent had ceased communication, acknowledged the misconduct of its agents and removed them from the debt recovery team.

Orders and outcome

The respondent was found liable and ordered to pay the complainant damages of Kenya Shillings Fifty Thousand (KES 50,000). Because of the corrective action taken, the Office expressly declined to issue an enforcement notice. Dated 2 July 2025.

DEBT-COLLECTION · FINTECH · MOBILE-LENDING · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Stephen Ngatia Maina v Whitepath, ODPC Complaint No. 0520 of 2025, determination of 2 July 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/whitepath/ (accessed 30 August 2026).

Same respondent

January 2026 · complaint upheld

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.