The complainant, a former contract employee of LOLC Kenya Microfinance Bank Limited, alleged that the bank published his personal data in public notices on its social media platforms without his prior consent. The respondent failed to respond to the ODPC's Notification of Complaint, which the Office treated as obstruction of the Data Commissioner.
Orders and outcome
The respondent was found liable and directed to erase the complainant's personal data from its online media within 14 days, failing which an enforcement notice would issue. A recommendation was made for the prosecution of the respondent company's directors for obstruction of the Data Commissioner. Dated 14 April 2026.
ODPC (Kenya), Peter Macharia Waithira v LOLC Kenya Microfinance Bank Limited, ODPC Complaint No. 0213 of 2026, determination of 14 April 2026. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2026/lolc-kenya-microfinance-unlawful-publication/ (accessed 30 August 2026).