Hello!

Welcome to Issue 001 of 2026 of the DataHub (Africa Data Protection) Weekly - your digest of fresh decisions from Kenya's Office of the Data Protection Commissioner (ODPC), with the compliance lessons that matter to your organisation.

This week: five new determinations, spanning horticulture, healthcare, retail, agribusiness, and fintech. Four respondents were found liable. One walked away with a full dismissal.

The difference between those outcomes tells you almost everything you need to know about where data protection compliance stands in Kenya right now.

THIS WEEK'S CASES AT A GLANCE

01 | Kabuyefu & 12 Others vs. Bohemian Flowers Limited ODPC Complaint No. 0752 of 2025 — VIOLATION

Award: KES 50,000 × 13 complainants (KES 650,000 total)

02 | Langat vs. AGC Tenwek Hospital ODPC Complaint No. 0966 of 2025 — VIOLATION

Award: KES 250,000

03 | Kamau vs. Michael's Bouquet ODPC Complaint No. 0688 of 2025 — VIOLATION

Award: KES 500,000

04 | Wanjiku vs. Farmers Choice Kenya Limited ODPC Complaint No. 0841 of 2025 — DISMISSED (No Violation)

Award: N/A

05 | Onyango vs. Stawika Capital Limited ODPC Complaint No. 0840 of 2025 — VIOLATION

Award: KES 50,000 + Enforcement Notice

CASE 01 — THE PENSION SWITCH THAT COST KES 650,000

Bohemian Flowers Limited vs. 13 former employees

ODPC Complaint No. 0752 of 2025 | Decided: 23 August 2025