Pherick Roda Mwazonga v Tinycost Credit Limited

Complaint upheld; compensation ordered; enforcement notice conditional. ODPC, 26 January 2026.

Record ID

ke-odpc-2026-0037

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Complainant

Pherick Roda Mwazonga

Date decided

26 January 2026

Respondent type

private

Sector

technology

Violations

unlawful data disclosure, unlawful processing

Provisions cited

s.25 DPA 2019, s.30 DPA 2019, s.56 DPA 2019, s.65 DPA 2019

Outcome

complaint upheld; compensation ordered; enforcement notice conditional

Compensation

KES 50,000 (≈ USD 390 at the decision date)

Status

final

Source

Official document ↗

Source integrity

SHA-256 927f5d994f9e04ba…

Record verified

30 July 2026

The facts

The complainant alleged that Tinycost Credit Limited unlawfully stored and processed her personal data by using it for direct marketing, sending her unsolicited promotional messages. The respondent did not respond to the ODPC's notification within the prescribed timelines, so the allegations stood uncontroverted, and the Office found the respondent had failed to establish any lawful basis for the processing.

Orders and outcome

The respondent was found liable and ordered to compensate the complainant KES 50,000 for unlawful processing, and to erase her personal data from its database with proof to the Office within fourteen days, failing which an enforcement notice would issue. Dated 26 January 2026.

DISCLOSURE · TECHNOLOGY · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.