The complainant alleged infringement of his rights by Whitepath Company Limited in the course of debt-recovery contact. The ODPC found his rights to be informed and to object were infringed, but noted the respondent had ceased communication, acknowledged the misconduct of its agents and removed them from the debt recovery team.
Orders and outcome
The respondent was found liable and ordered to pay the complainant damages of Kenya Shillings Fifty Thousand (KES 50,000). Because of the corrective action taken, the Office expressly declined to issue an enforcement notice. Dated 2 July 2025.
ODPC (Kenya), Stephen Ngatia Maina v Whitepath, ODPC Complaint No. 0520 of 2025, determination of 2 July 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2025/whitepath/ (accessed 23 October 2026).
Free: a monthly digest of new verified decisions in your chosen jurisdictions. You confirm by email before anything is sent; every alert has an unsubscribe link. Privacy · Terms.