Esau Barua Ceres Tech

Complaint upheld. ODPC, January 2026. month-precision date

Record ID: ke-odpc-2026-0009
Case reference: ODPC Complaint No. 1348 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Date decided: January 2026
Respondent type: private
Sector: technology
Violations: lack of consent, commercial use of personal data, failure to respond to erasure request, unlawful processing
Provisions cited: s.25 DPA 2019, s.25(c) DPA 2019, s.26 DPA 2019, s.26(c) DPA 2019, s.37 DPA 2019, s.37(1) DPA 2019, s.56 DPA 2019, s.65(4) DPA 2019, s.65(2) DPA 2019, s.65(1) DPA 2019
Outcome: complaint upheld
Status: final
Source: Official document ↗
Record verified: 12 March 2026

Summary

The ODPC upheld a complaint against Esau Barua Ceres Tech in the technology sector concerning lack of consent, commercial use of personal data, failure to respond to erasure request. The determination considers s.25 DPA 2019, s.25(c) DPA 2019, s.26 DPA 2019, s.26(c) DPA 2019.

CONSENT · RIGHT-TO-ERASURE · TECHNOLOGY · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), ODPC Complaint No. 1348 of 2025, determination of January 2026. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2026/esau-barua-ceres-tech/ (accessed 22 July 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.