Steve Onwonga Omwenga v Cjs Limited

Complaint upheld; compensation ordered. ODPC, January 2026.

Record ID: ke-odpc-2026-0028
Case reference: ODPC Complaint No. 1498 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Steve Onwonga Omwenga
Date decided: January 2026
Respondent type: private
Sector: professional services
Violations: lack of consent, commercial use of personal data, unlawful processing
Provisions cited: s.25(b) DPA 2019, s.25 DPA 2019, s.30 DPA 2019, s.37 DPA 2019, s.56(1) DPA 2019, s.56 DPA 2019, s.65(4) DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered
Compensation: KES 75,000 (≈ USD 580 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 01bfa9bb607329d0…
Record verified: 30 July 2026

The facts

The complainant alleged that CJ's Limited used his personal data to send him promotional messages although he had not given prior consent and had opted out. The ODPC found the processing unlawful, while noting the respondent's later remedial measures: reaching out to the complainant, apologising, offering a goodwill gesture of KES 10,000, ceasing further communications and implementing consent-based marketing controls.

Orders and outcome

The respondent was found liable and, the mitigating factors considered, ordered to pay the complainant KES 75,000 as compensation. Dated January 2026.

CONSENT · LEGAL · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Steve Onwonga Omwenga v Cjs Limited, ODPC Complaint No. 1498 of 2025, determination of January 2026. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2026/cjs-limited/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.