Julian Rowa, suing on behalf of a minor AJR v Nairobi Academy

Complaint upheld; compensation ordered. ODPC, 19 January 2026.

Record ID: ke-odpc-2026-0032
Case reference: ODPC Complaint No. 1597 of 2025
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Complainant: Julian Rowa, suing on behalf of a minor AJR
Date decided: 19 January 2026
Respondent type: private
Sector: education
Violations: lack of consent, commercial use of personal data, unlawful data disclosure, unlawful processing
Provisions cited: s.25 DPA 2019, s.26(2) DPA 2019, s.27(a) DPA 2019, s.30 DPA 2019, s.33(1) DPA 2019, s.33 DPA 2019, s.37 DPA 2019, s.56 DPA 2019, s.65(4) DPA 2019, s.65(2) DPA 2019, s.65(1) DPA 2019
Outcome: complaint upheld; compensation ordered
Compensation: KES 637,500 (≈ USD 4,940 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 54a60d9825fb258b…
Record verified: 30 July 2026

The facts

The complainant, suing on behalf of his minor child, alleged that The Nairobi Academy shared and publicly disclosed the child's personal data without his consent or any other lawful basis. The ODPC found the school unlawfully processed the minor's personal data for commercial purposes and violated the complainant's right to object, taking into account the respondent's previous conduct and the scope of publication.

Orders and outcome

The respondent was found liable and ordered to compensate the complainant KES 637,500. Dated 19 January 2026.

CONSENT · DISCLOSURE · EDUCATION · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Julian Rowa, suing on behalf of a minor AJR v Nairobi Academy, ODPC Complaint No. 1597 of 2025, determination of 19 January 2026. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2026/nairobi-academy/ (accessed 30 August 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.