Kennedy Wambugu v Whitepath

Complaint upheld; compensation ordered. ODPC, January 2026.

Record ID

ke-odpc-2026-0039

Case reference

ODPC Complaint No. 1479 of 2025

Jurisdiction

Kenya

Regulator

ODPC

Type

determination

Complainant

Kennedy Wambugu

Date decided

January 2026

Respondent type

private

Sector

digital lending

Violations

unlawful data disclosure, unlawful processing

Provisions cited

s.25 DPA 2019, s.26(a) DPA 2019, s.26 DPA 2019, s.28(2) DPA 2019, s.28(3) DPA 2019, s.28 DPA 2019, s.29 DPA 2019, s.30 DPA 2019, s.30(1) DPA 2019, s.56 DPA 2019, s.65 DPA 2019

Outcome

complaint upheld; compensation ordered

Compensation

KES 350,000 (≈ USD 2,710 at the decision date)

Status

final

Source

Official document ↗

Source integrity

SHA-256 6b133bf81fee8ebe…

Record verified

30 July 2026

The facts

The complainant alleged that Whitepath Company Limited, without his consent or any lawful basis, unlawfully collected and processed his telephone number for purposes of recovering a non-existent loan. The ODPC found the respondent unlawfully collected, processed and disclosed his personal data and violated his right to be informed.

Orders and outcome

The respondent was found liable and directed to compensate the complainant KES 350,000, the Office taking into account the nature and extent of the violation and the harm occasioned. Dated January 2026.

DISCLOSURE · FINTECH · MOBILE-LENDING · UNLAWFUL-PROCESSING · UPHELD

Cite this decision

Same respondent

• 2 July 2025 · complaint upheld

Track Kenya enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.