MP Muchangi Patrick& Associates Advocates
Talk to an Expert
Practice Areas Case Digest Knowledge Centre Insights About Contact Talk to an Expert
Muchangi Patrick & Associates Advocates logo Muchangi Patrick & Associates Advocates ← Back to the Blog

Case Note

Case Notes & Commentary
ODPC & High Court, Kenya
One ruling, digested on its own — the facts, the holding, and the practice point
[2026] KEHC 8819

The High Court's data protection jurisdiction is "staggered," not absent

Mwaniki v Safaricom PLC

Suit struck out for non-exhaustion Case Note Data Protection · Administrative Law
By the Editorial Board, Muchangi Patrick & Associates Advocates

A plaintiff sued Safaricom directly, alleging it had launched a financial product substantially identical to one he had developed and shared with the company, in violation of his data protection rights. Safaricom's preliminary objection argued the High Court lacked jurisdiction entirely, since data protection claims sit exclusively with the ODPC. The Court rejected that framing as "mistaken and misconceived": the High Court does have jurisdiction over data protection claims, but that jurisdiction is deferred, or staggered — the ODPC investigates and determines first, and the High Court's role follows, either on appeal or by adoption and enforcement of the resulting award. On the facts, the suit was struck out because the plaintiff had not gone to the ODPC first.

Practice pointResist any argument that the ODPC's existence strips the High Court of jurisdiction altogether — the correct characterisation, now stated plainly by the Court, is a staggered jurisdiction where the ODPC goes first and the High Court's constitutional role remains fully intact, just deferred.
Cite this page: Muchangi Patrick & Associates Advocates, "The High Court's data protection jurisdiction is "staggered," not absent: Mwaniki v Safaricom PLC" (dataprivacyadvocates.co.ke, 2026) <https://dataprivacyadvocates.co.ke/case-mwaniki-v-safaricom-plc.html>.
How this touches a live ODPC matter

Whether you are defending a complaint, appealing a determination, or bringing a privacy claim of your own, the forum you choose and the procedural record you build early usually decide the outcome.

Muchangi Patrick & Associates Advocates represents complainants and respondents before the Office of the Data Protection Commissioner and on appeal, judicial review and constitutional petition before the High Court.

Related resource

See how your own organisation would score against the same twenty benchmarks the ODPC and the courts test disputes like this one against.

Open the Kenya Data Protection Compliance Checklist →

Continue reading
← A family business is ordered to stop using a relative's KRA PIN without his knowledge
All Case Notes on the Blog
Kenya's courts decline a blanket AI moratorium, but order the government to report back →