← Muchangi Patrick Published Work
⇩ Download PDF
Muchangi Patrick & Co. Advocates logo Muchangi Patrick & Co. Advocates ← Back to the Blog

Case Note

Case Notes & Commentary
ODPC & High Court, Kenya
One ruling, digested on its own — the facts, the holding, and the practice point
[2026] KEHC 8819

The High Court's data protection jurisdiction is "staggered," not absent

Mwaniki v Safaricom PLC

Suit struck out for non-exhaustion Case Note Data Protection · Administrative Law
By the Editorial Board, Muchangi Patrick & Co. Advocates

A plaintiff sued Safaricom directly, alleging it had launched a financial product substantially identical to one he had developed and shared with the company, in violation of his data protection rights. Safaricom's preliminary objection argued the High Court lacked jurisdiction entirely, since data protection claims sit exclusively with the ODPC. The Court rejected that framing as "mistaken and misconceived": the High Court does have jurisdiction over data protection claims, but that jurisdiction is deferred, or staggered — the ODPC investigates and determines first, and the High Court's role follows, either on appeal or by adoption and enforcement of the resulting award. On the facts, the suit was struck out because the plaintiff had not gone to the ODPC first.

Practice pointResist any argument that the ODPC's existence strips the High Court of jurisdiction altogether — the correct characterisation, now stated plainly by the Court, is a staggered jurisdiction where the ODPC goes first and the High Court's constitutional role remains fully intact, just deferred.
Cite this page: Muchangi Patrick & Co. Advocates, "The High Court's data protection jurisdiction is "staggered," not absent: Mwaniki v Safaricom PLC" (dataprivacyadvocates.co.ke, 2026) <https://dataprivacyadvocates.co.ke/case-mwaniki-v-safaricom-plc.html>.
How this touches a live ODPC matter

Whether you are defending a complaint, appealing a determination, or bringing a privacy claim of your own, the forum you choose and the procedural record you build early usually decide the outcome.

Muchangi Patrick & Co. Advocates represents complainants and respondents before the Office of the Data Protection Commissioner and on appeal, judicial review and constitutional petition before the High Court.

Continue reading
← A family business is ordered to stop using a relative's KRA PIN without his knowledge
All Case Notes on the Blog
Kenya's courts decline a blanket AI moratorium, but order the government to report back →