Three firms, among them Casa Vera Lounge, have been fined Ksh. 9.4 million for violating data privacy laws.
The Office of the Data Protection Commissioner (ODPC) has penalized Casa Vera Lounge, a restaurant based along Ngong Road, Nairobi for posting a reveler’s photo on social media without consent.
Casa Vera Lounge has been fined Ksh1,850,000.
“This penalty seeks to ensure that other lounges, and clubs seek consent from their customers prior to posting their images online,” The ODPC added.
The Commission did not give any further details on the nature of the image and when it was shared on the club’s social media.
Other firms penalized
The ODPC also penalized Mulla Pride Ltd, a Digital Credit Provider (DCP) which operates KeCredit and Faircash mobile lending Apps.
The company was penalized Sh2.975 million for using names and contact information lenders obtained from third parties.
“This Penalty will ensure that digital lenders and financial institutions notify data subjects when collecting and processing their data, and the intention of processing the said data.
“It will further ensure that the data controllers are limited to strictly dealing with data subjects who have consented to the collection and processing of their data,” the statement said.
ODPC has also fined Roma School Ksh4,550,000 for posting minors’ pictures without parental consent.
“This being the first and the highest penalty to an educational facility sends a message to schools and other facilities handling minors’ personal data to obtain consent from parents/guardians prior to processing minors’ data,” ODPC added.
Data Commissioner Immaculate Kassait called upon data controllers and data processors to ensure that the processing of personal data is in accordance with the provision of the Data Protection Act, 2019.
She warned that failure to comply with the Act will result in instituting enforcement procedures.