Authority: ODPC - Kenya
Jurisdiction: Kenya
Relevant law: Legal provisions Reviewed
Type: Complaint
Outcome: Violation
Started: 9 September 2024
Decided: 9 December 2024
Published: Yes
Fine: N/A
Parties: Hilda Musimbi Anyama (Suing on behalf of herself & a minor (LK)) vs. Friends School Keveye Girls High School
Case No.: 1349 of 2024
Appeal: N/A
Original Source: ODPC
Original contributor: MZIZI Africa

Contents

  1. Summary
    1. Facts
    2. Holding
  2. Comment
  3. Further resources
  4. The Decision

Summary

The case involved a minor's guardian suing Friends School Keveye Girls for unlawfully disclosing a video of the minor's punishment on social media. The school argued the video was for internal use and denied public dissemination. The ODPC found the school violated data minimization and lacked lawful basis for processing the personal data, issuing an Enforcement Notice.

Facts

Hilda Musimbi Anyama, on behalf of a minor (LK), alleged that Friends School Keveye Girls High School unlawfully processed and disclosed the minor's personal data to third parties. This was done without the Complainant's knowledge, express consent, or any lawful justification, violating the principles of data protection. The Complainant, as the legal guardian, stated she was solely responsible for facilitating the minor's admission to the school.

Specifically, the Complainant contended that:

Friends School Keveye Girls High School submitted a response to the Notification of Complaint . They maintained that they had a lawful basis for processing the minor's personal data .

The Respondent pleaded: