Editor's Review

"This Penalty seeks to ensure that other lounges, clubs etc. seek consent from their customers prior to posting their images online."

The Office of the Data Protection Commissioner (ODPC) has fined the Casa Vera Lounge Ksh 1.85 million for posting a reveler's image on their social media platform without consent.

In a statement on Tuesday, September 26, ODPC said the penalty will serve as a warning to other lounges and clubs who post images of their customers without their consent.

“The establishment was fined KES 1,850,000 for posting a reveler's image on their social media platform without the data subject's consent. This Penalty seeks to ensure that other lounges, clubs etc. seek consent from their customers prior to posting their images online,” read the statement in part.

ODPC at the same time fined Roma School Ksh 4,550,000 for posting minors' pictures without parental consent.

“This being the first and the highest penalty to an educational facility sends a message to schools and other facilities handling minors' personal data to obtain consent from parents/guardians prior to processing minors' data,” ODPC stated.

File image of Data Commissioner Immaculate Kassait

Mulla Pride Ltd, a Digital Credit Provider which operates KeCredit and Faircash mobile lending Apps was also fined Ksh 2,975,000 after being found culpable of using the names and contact information of complainants which were obtained from third parties and subsequently used to send threatening messages and phone calls.

ODPC further stated that it has conducted a compliance audit on WhitePath and an inspection of Naivas Supermarkets on a recent Data Breach.

"The findings will be shared with the Data Controllers for their swift action," said ODPC.