The complainant alleged that Nairobi City Water and Sewerage Company continued sending him unsolicited text messages despite his objection, a cease-and-desist email and a request for erasure. The ODPC found the respondent failed to honour his right to object to the processing of his personal data.
Orders and outcome
The respondent was found liable and ordered to pay the complainant KES 250,000 as compensation. The Office expressly declined to issue an enforcement notice because the respondent had put corrective measures in place, including removing the complainant's number from its systems. Dated February 2026.
ODPC (Kenya), Gachiri Ndungo v Ncwsc, ODPC Complaint No. 1752 of 2025, determination of February 2026. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2026/ncwsc/ (accessed 30 August 2026).