Data controllers and processors with expired registration certificates have 14 days to renew them or face possible enforcement action by the Office of the Data Protection Commissioner (ODPC). ODPC has directed all affected entities to regularize their registration status by applying for renewal within 14 days from the date of its notice. Organizations required to
St. Luke Orthopaedic and Trauma Hospital in Eldoret has been ordered to compensate a patient after the Office of the Data Protection Commissioner (ODPC) found that it unlawfully disclosed her sensitive personal data and failed to safeguard her medical information. According to a ruling issued by the Data Commissioner, St. Luke Orthopaedic and Trauma Hospital
Platinum Credit Limited has been ordered to pay Ksh 400,000 to a Kenyan citizen for unlawfully using his personal data to send unsolicited loan promotions, calls, and text messages without his consent. The decision was issued by the Office of the Data Protection Commissioner (ODPC) following a formal complaint filed by Samuel Kamau. According to