High Court Sets Aside ODPC Determination Relating to a Data Subject Access Request
Kenya Airways PLC v Obano [2026] KEHC 7059 (KLR) 1. Background 1. On 15th December 2023, the Office…
Data Protection
43 posts
Emerging Data Protection Principles on the Use of Personal Data by Journalists and Media Houses
The publication of news and other media content often involves the processing of personal data, including names, photographs,…
ODPC – Email Deactivation May Violate Data Access Rights
Background: In Brandon Omondi t/a Brandon & Associates Advocates v True-host Cloud, the Complainant lodged a complaint alleging…
Publishing a Minor’s Examination Results in Newspapers Requires Parental Consent
Background: In Julian Rowa (Suing on Behalf of a Minor AJR) v The Nairobi Academy, the Complainant alleged…
High Court Reduces ODPC Compensation Award from Kshs. 250,000 to Kshs. 50,000 and Clarifies Principles for Assessing Data Protection Damages
Background: In Jaggys (Kienyeji Chicken v Gichunge [2026] KEHC 6856 (KLR) the Respondent lodged a complaint with the…
Emerging Data Protection Principles on Direct Marketing
Direct marketing has become an essential tool, enabling organization to promote their products and services, engage with existing…
Emerging Data Protection Obligations for Healthcare Providers in Kenya
Healthcare providers routinely collect, use, store and share significant volumes of personal data in the course of providing…
ODPC Issues Enforcement Notice Against Hospital for Sharing Patient’s Details
Esther Gitau V Shree Swaminarayan Hospital The Office of the Data Protection Commissioner (ODPC) recently issued a determination…
Data Controllers Bear the Burden of Proving Consent for Unsolicited Messages
Background In John Mkomba Nzau v Kuza Sacco Society Limited, the Complainant alleged that the Respondent sent unsolicited…