Eldoret Hospital

Complaint upheld; enforcement notice issued. ODPC, January 2026. month-precision date

Record ID

ke-odpc-2026-0007

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Date decided

January 2026

Respondent type

private

Sector

healthcare

Violations

unlawful data disclosure, failure to prevent data breach, obstruction of data commissioner, failure to conduct dpia, unlawful processing, failure to register with odpc, failure to implement security measures

Provisions cited

s.25(G) DPA 2019, s.25(b) DPA 2019, s.25 DPA 2019, s.25(D) DPA 2019, s.26 DPA 2019, s.29 DPA 2019, s.30(1)(b) DPA 2019, s.30(1) DPA 2019, s.41 DPA 2019, s.58 DPA 2019

Outcome

complaint upheld; enforcement notice issued

Status

final

Source

Official document ↗

Record verified

12 March 2026

Summary

The ODPC upheld a complaint against Eldoret Hospital in the healthcare sector concerning unlawful data disclosure, failure to prevent data breach, obstruction of data commissioner. The determination considers s.25(G) DPA 2019, s.25(b) DPA 2019, s.25 DPA 2019, s.25(D) DPA 2019. An enforcement notice was issued against the respondent.

DATA-BREACH · DATA-SECURITY · DISCLOSURE · HEALTHCARE · OBSTRUCTION · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.