Tinycost

Complaint upheld; compensation ordered; enforcement notice issued. ODPC, February 2026. month-precision date

Record ID: ke-odpc-2026-0037
Jurisdiction: Kenya
Regulator: ODPC
Type: determination
Date decided: February 2026
Respondent type: private
Sector: technology
Violations: unlawful data disclosure, unlawful processing
Provisions cited: s.25 DPA 2019, s.30 DPA 2019, s.56 DPA 2019, s.65 DPA 2019
Outcome: complaint upheld; compensation ordered; enforcement notice issued
Compensation: KES 50,000 (≈ USD 390 at the decision date)
Status: final
Source: Official document ↗
Record verified: 12 March 2026

Summary

The ODPC upheld a complaint against Tinycost in the technology sector concerning unlawful data disclosure, unlawful processing. The determination considers s.25 DPA 2019, s.30 DPA 2019, s.56 DPA 2019, s.65 DPA 2019. The Office ordered KES 50,000 in compensation. An enforcement notice was issued against the respondent.

DISCLOSURE · TECHNOLOGY · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

ODPC (Kenya), Tinycost, determination of February 2026. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/kenya/odpc/2026/tinycost/ (accessed 22 July 2026).

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.