Authority: ODPC - Kenya
Jurisdiction: Kenya
Relevant law: Section 40(1)(b), 26(e) of the Data Protection Act, 2019; Regulation 12 (1) (b) of the Data Protection (General) Regulations, 2021.
Type: Complaint
Outcome: Violation
Started: 9 October 2023
Decided: 6 January 2024
Published: Yes
Fine: KES 750,000
Parties: Nancy Mugo vs. Miguel Ventures
Case No.: 1981 of 2023
Appeal: HCJR/027/2024
Original Source: ODPC
Original contributor: MZIZI Africa

Contents

  1. Summary
    1. Facts
    2. Holding
  2. Comment
  3. Further resources
  4. The Decision

Summary

Miguel Ventures (the “Respondent”) was found liable for privacy violations and fined KES.750,000/=, when it posted an individual's image on their social media without consent and failing to remove it upon request.

Facts

The case involves a complaint where the Respondent posted the Complainant's images on its social media platforms and disregarded her request to remove the images.

The Complainant provided evidence of the images being posted and her unsuccessful attempts to have them taken down.

The Respondent was notified of the complaint but did not respond. As a result, the determination was made based on the evidence provided by the Complainant.

It was found that the Respondent violated the Complainant's rights under the Data Protection Act by failing to remove the images despite the Complainant's request. Consequently, the Respondent was ordered to compensate the Complainant with KES 750,000 for the unauthorized use of her image for commercial gain and the infringement of her privacy rights.

Holding

The ODPC held that:

Comment

The full text of the ruling is available below.