The complainant alleged that CJ's Limited used his personal data to send him promotional messages although he had not given prior consent and had opted out. The ODPC found the processing unlawful, while noting the respondent's later remedial measures: reaching out to the complainant, apologising, offering a goodwill gesture of KES 10,000, ceasing further communications and implementing consent-based marketing controls.
Orders and outcome
The respondent was found liable and, the mitigating factors considered, ordered to pay the complainant KES 75,000 as compensation. Dated January 2026.
CONSENT · LEGAL · UNLAWFUL-PROCESSING · UPHELD
Cite this decision
ODPC (Kenya), Steve Onwonga Omwenga v Cjs Limited, ODPC Complaint No. 1498 of 2025, determination of January 2026. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2026/cjs-limited/ (accessed 23 October 2026).
Track Kenya enforcement
Free: a monthly digest of new verified decisions in your chosen jurisdictions. You confirm by email before anything is sent; every alert has an unsubscribe link. Privacy · Terms.