Data Controllers Bear the Burden of Proving Consent for Unsolicited Messages
Background In John Mkomba Nzau v Kuza Sacco Society Limited, the Complainant alleged that the Respondent sent unsolicited…
Data Protection
44 posts
ODPC Determinations on the Use of Customer Images for Marketing
The Office of the Data Protection Commissioner (ODPC) recently issued a determination following an investigation into the data…
Using Personal Names and Professional Accolades without Lawful Basis is a Legal Violation
Arthur V.O Opinya, and 2 Others v Brainstorm Insurance Brokers Limited Background In Arthur V.O Opinya, and 2…
Data Protection Compliance Considerations in Corporate Acquisition Transactions
Background In Catherine Wairimu Gabriel v Penda Health Limited the Complainant lodged a complaint with the Office of…
Data Controllers Must Honour Objections and Erasure Requests
Background In Michael Rashid Mwakio v Kings Commodities Limited, the Complainant lodged a complaint with the Office of…
The Hidden Data Protection Risk in a Simple Social Media Notice
“This Employee Is No Longer Associated with Our Company…”
Image Use Consent Should be Specific and Not Bundled in Terms & Condition
Background In Antonate Rombo Aiko v Goodtimes Africa t/a Blankets & Wine, the Complainant lodged a complaint with…
Hospitals Must Obtain Explicit Consent Before Sharing Patient’s Data with Third Party Laboratories
Background In Merceline Akoth Odeyo v St. Luke Orthopaedic & Trauma Hospital Eldoret, the Complainant filed a complaint…
Recent ODPC Decisions on the use of Personal Photos & Videos in Kenya
In recent years, Kenya has witnessed significant developments in data protection. One key development has been the commitment…
5 Key Policies For Data Protection Compliance
In the vast expanse of the cosmos, humanity has always been driven by an insatiable curiosity