Office of the Data Protection Commissioner ODPC
Supervises
All industries
Who they are
Independent State office and body corporate created by section 5 of the Data Protection Act, 2019, which came into force on 25 November 2019.
What they do
It regulates the processing of personal data, registers data controllers and processors, determines complaints and issues enforcement and penalty notices. Its website publishes complaint determinations by year, press releases and guidelines.
Key laws & regulations issued
Enforcement by this regulator
| Date | Entity | Action | Penalty | Source |
|---|---|---|---|---|
| 14 Apr 2026 | LOLC Kenya Microfinance Bank Limited (microfinance bank) | Remedial Direction | — | official |
| 8 Apr 2026 | Goodtimes Africa T/A Blankets & Wine (events company (trades as Blankets & Wine)) | Disgorgement / Restitution | — | official |
| 16 Mar 2026 | St. Luke Orthopaedic & Trauma Hospital Eldoret (hospital) | Disgorgement / Restitution | — | official |
| 11 Mar 2026 | BlueSky Drycleaners (dry-cleaning business) | Remedial Direction | — | official |
| 11 Mar 2026 | Payablu Credit T/A Tumacash Limited (limited company (trades as Tumacash)) | Remedial Direction | — | official |
| 21 Dec 2022 | Oppo Kenya (company) | Monetary Penalty | KES 5,000,000 | official |
Latest news
No news tagged to this regulator yet.