Margaret Manyange v Brites Mgmt

Complaint upheld; compensation ordered; enforcement notice conditional. ODPC, 7 January 2026.

Record ID: ke-odpc-2026-0027
Case reference: ODPC Complaint No. 1532 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Margaret Manyange
Date decided: 7 January 2026
Respondent type: private
Sector: hr and recruitment
Violations: unlawful data disclosure, unlawful processing
Provisions cited: s.25 DPA 2019, s.26 DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered; enforcement notice conditional
Compensation: KES 262,500 (≈ USD 2,030 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 6f017d1a7d9b7e40…
Record verified: 30 July 2026

The facts

The complainant alleged the respondent infringed her right to be informed of the use to which her personal data would be put and processed her personal data unlawfully. The ODPC also noted that the respondent was not registered as a data handler as the Act requires.

Orders and outcome

The respondent was found liable and ordered to pay the complainant KES 262,500 as compensation, and was directed to register with the Office as a data handler within fourteen days, failing which an enforcement notice would issue. Dated 7 January 2026.

DISCLOSURE · EMPLOYMENT · HR · RECRUITMENT · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Margaret Manyange v Brites Mgmt, ODPC Complaint No. 1532 of 2025, determination of 7 January 2026. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2026/brites-mgmt/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.