Capital SACCO Limited

Suo moto investigation; enforcement notice issued. ODPC, January 2026.

Record ID

ke-odpc-2026-0019

Case reference

ODPC Suo Moto Investigation No. ODPC/SM/0010/2025

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Date decided

January 2026

Respondent type

private

Sector

banking

Violations

lack of consent, commercial use of personal data, unlawful data disclosure, unlawful processing, failure to register with odpc

Provisions cited

s.25(a) DPA 2019, s.25 DPA 2019, s.26 DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.32 DPA 2019, s.33 DPA 2019, s.37 DPA 2019, s.58 DPA 2019

Outcome

suo moto investigation; enforcement notice issued

Status

final

Source

Official document ↗

Source integrity

SHA-256 4c426dccd4343ef5…

Record verified

30 July 2026

The facts

A suo moto investigation by the ODPC into the personal data processing practices of Capital Sacco Limited in Meru. The Office found the Sacco unable to demonstrate compliance with the Act, taking into account the nature and extent of the violation with regard to unlawful processing of minors' personal data and the respondent's conduct.

Orders and outcome

The respondent was found non-compliant in respect of the suo moto investigation and an enforcement notice was issued against it. Dated January 2026.

BANKING · CONSENT · DISCLOSURE · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.