Case Note
Platinum Credit Limited v Data Protection Commissioner & Another
A lender's sales agent allegedly obtained a complainant's vehicle details from the company's own database and used them to cold-call him about a loan he had never sought. The ODPC investigated, found the agent had indeed accessed the data without consent, and ordered KES 400,000 in compensation plus a recommendation to prosecute the company's directors. On appeal, the fatal flaw was not the finding of liability — it was that the Commissioner relied on additional evidence from the sales agent that was never served on the lender, and never gave it a chance to cross-examine or rebut that evidence before deciding the case. The Court held that Articles 47 and 50 are "the bedrock of Kenyan jurisprudence," not a technicality to be waived, and set the whole determination aside on that basis alone — while also flagging that KES 400,000 looked high absent proof of actual loss.
Whether you are defending a complaint, appealing a determination, or bringing a privacy claim of your own, the forum you choose and the procedural record you build early usually decide the outcome.
Muchangi Patrick & Associates Advocates represents complainants and respondents before the Office of the Data Protection Commissioner and on appeal, judicial review and constitutional petition before the High Court.
See how your own organisation would score against the same twenty benchmarks the ODPC and the courts test disputes like this one against.