Roma School based in Uthiru was on Tuesday, September 26 slapped with a heavy fine for posting a student photo online without getting consent from the parent.
According to a statement from the Data Protection Commissioner (ODPC), the school will be compelled to pay Ksh4,550,00 for posting a minor’s picture without parental consent.
The penalty was issued under Sections 62 and 63 of the Data Protection Act,2019, and Regulations 20 and 21 of the Data Protection (Complaints Handling Procedure and Enforcement) Regulations, 2021.
Club Sharing a Reveller’s Photo
Casa Vera Lounge restaurant located along Ngong Road in Nairobi has also been penalized Ksh1,850,000 for posting a reveler’s image on their social media platform without the subject’s consent.
“This penalty seeks to ensure that other lounges, clubs, etc. seek consent from their customers before posting their images online,” Data Commissioner Immaculate Kassait stated.
Lending Firm
The ODPC also reigned in a Digital Credit Provider (DCP), Mulla Pride Ltd which operates KeCredit and Faircash mobile lending. As a DCP it was found guilty of obtaining user data and proceeding to use the information to harass a client via messages and phone calls. Mulla Pride was fined Ksh2,975,000.
“Subsequently, they used the information to send threatening messages and phone calls. This penalty will ensure that digital lenders and financial institutions notify data subjects when collecting and processing their data and the intention of processing the said data,” the ODPC noted.
Under the Digital Credit Providers Regulations 2021, the Central Bank of Kenya (CBK) has the power to revoke the licenses of firms that use third parties in name-and-shame tactics meant to recover money.
It is not clear what further actions will be taken against the lender.
