| Authority: | ODPC - Kenya |
|---|---|
| Jurisdiction: | Kenya |
| Relevant law: | Legal provisions Reviewed |
| Type: | Complaint |
| Outcome: | Violation |
| Started: | 9 September 2024 |
| Decided: | 9 December 2024 |
| Published: | Yes |
| Fine: | N/A |
| Parties: | Hilda Musimbi Anyama (Suing on behalf of herself & a minor (LK)) vs. Friends School Keveye Girls High School |
| Case No.: | 1349 of 2024 |
| Appeal: | N/A |
| Original Source: | ODPC |
| Original contributor: | MZIZI Africa |
The case involved a minor's guardian suing Friends School Keveye Girls for unlawfully disclosing a video of the minor's punishment on social media. The school argued the video was for internal use and denied public dissemination. The ODPC found the school violated data minimization and lacked lawful basis for processing the personal data, issuing an Enforcement Notice.
Hilda Musimbi Anyama, on behalf of a minor (LK), alleged that Friends School Keveye Girls High School unlawfully processed and disclosed the minor's personal data to third parties. This was done without the Complainant's knowledge, express consent, or any lawful justification, violating the principles of data protection. The Complainant, as the legal guardian, stated she was solely responsible for facilitating the minor's admission to the school.
Specifically, the Complainant contended that:
Friends School Keveye Girls High School submitted a response to the Notification of Complaint . They maintained that they had a lawful basis for processing the minor's personal data .
The Respondent pleaded: