LOLC Kenya Microfinance Bank Limited

Complaint upheld; deletion ordered; prosecution of directors recommended. ODPC, 14 April 2026.

Record ID

ke-odpc-2026-0041

Case reference

ODPC Complaint No. 0213 of 2026

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Date decided

14 April 2026

Respondent type

private

Sector

banking

Violations

unlawful processing, publication of personal data without consent, obstruction of the Data Commissioner

Provisions cited

DPA 2019 s.25, DPA 2019 s.30, DPA 2019 s.61

Outcome

complaint upheld; deletion ordered; prosecution of directors recommended

Status

final

Source

Official document ↗

Record verified

6 July 2026

Summary

The ODPC held LOLC Kenya Microfinance Bank liable for posting a former employee's images and personal details on social media without consent, and ordered deletion of the data from all platforms within 14 days. The Data Commissioner recommended the bank's directors for criminal prosecution for obstruction after they failed to cooperate with the investigation, an offence carrying fines up to KES 5,000,000 or two years' imprisonment on conviction. The determination extends ODPC enforcement to directors personally.

EMPLOYMENT · SOCIAL-MEDIA · OBSTRUCTION · DIRECTOR-LIABILITY · PROSECUTION

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.