**ABOUT US • DETERMINATIONS DATABASE • LAWS & SUMMARIES • FINES DATABASE • JURISPRUDENCE TRANKER • ARTIFICIAL INTELLIGENCE • DATA AUTHORITIES • AUDIO NOTES • PRIVACY LENS, Blog • DATA VISUALS**

INTRODUCTION

The Office of the Data Protection Commissioner (ODPC) is established under the Data Protection Act, 2019 (the Act), which was enacted on November 8, 2019. The office is headed by the Data Protection Commissioner.

<aside> <img src="/icons/briefcase_red.svg" alt="/icons/briefcase_red.svg" width="40px" />

Office of the Data Protection Commissioner

</aside>

DETERMINATIONS

Key ODPC Stats:

There were 34 determinations in 2024. According to its Annual Report, by March 2025, the ODPC had received 7,128 complaints and issued 215 determinations.

• 10 entities were penalised,
• 103 cases resulted in compensation, and
• 39 cases resolved via Alternative Dispute Resolution (ADR).

Click to access more summaries. We update the visuals daily. Follow our socials to stay updated.

Click to access more summaries. We update the visuals daily. Follow our socials to stay updated.

<aside>

ODPC MARCH 2025 STATS | 215 DETERMINATIONS • 7,128 COMPLAINTS

</aside>

We have over 280 determinations in the Kenyan database, grouped by subject area for easy reference. While each case is categorized by its dominant theme, they may address multiple issues.

Click on the toggle to access the case summary and detailed ruling and other discussed matters.

• CCTV (3)

• Compliance Framework (4)

• Sensitive Data | Children, Biometric, Health (20)

• Data Minimisation / Purpose Limitation (3)

• Data Transfers (1)

• Data Subject Rights | Accuracy, Erasure, Object, Access, Information (43)

• Direct Collection / Transparency (36)

• Commercial Use | Soft Opt-In, Promotions, Unauthorised Use (18)

• Employee Investigations (2)

• Exclusions (3)

• Image Rights (40)

• Jurisdiction / Locus (6)

• Lawful Processing (34) | Consent, Unlawful Processing, Legitimate Interests

• Liability Cases (4)

• Obstruction (6)

• Persistence / Offence Timelines (1)

• Public Information (1)

• Personal Data (4)

• Preservation orders (1)

• Procedure (3)

• Processing Contracts/Agents (3)

• Proof (6)

• Right to Privacy (4)

• Succession (1)

• Technical Safeguards(1)

• Third Party Compliance (1)

• Unlawful Disclosure | Employee Negligence, Data Hygiene, Tech Safeguards, Data Sharing (11)

APPEALS | REVIEW (24)

The decisions under Determinations may be the subject of an Appeal or Review. These are set out hereunder and contain references to the original determination.

• Administrative Justice | Time, Process (9)
• Judicial review (1) | Mandamus
• Compensation/Award (3)
• Direct Collection of Data (1)
• Exhaustion of Remedies\Jurisdiction (6)
• Image Rights / Commercial use (1)
• Lawful Basis (1)
• Personal Data (1)
• Service (1)

AUDIO NOTES, Podcast ‣

Want updates on new cases and insights that matter? Sign up for our newsletter and stay connected to the latest in data protection and digital compliance.