← Muchangi Patrick Published Work
⇩ Download PDF
Muchangi Patrick & Co. Advocates logo Muchangi Patrick & Co. Advocates ← Back to the Blog

Case Note

Case Notes & Commentary
ODPC & High Court, Kenya
One ruling, digested on its own — the facts, the holding, and the practice point
[2026] KEHC 7257

Undisclosed witness evidence sinks a KES 400,000 award

Platinum Credit Limited v Data Protection Commissioner & Another

Appeal allowed Case Note Data Protection · Administrative Law
By the Editorial Board, Muchangi Patrick & Co. Advocates

A lender's sales agent allegedly obtained a complainant's vehicle details from the company's own database and used them to cold-call him about a loan he had never sought. The ODPC investigated, found the agent had indeed accessed the data without consent, and ordered KES 400,000 in compensation plus a recommendation to prosecute the company's directors. On appeal, the fatal flaw was not the finding of liability — it was that the Commissioner relied on additional evidence from the sales agent that was never served on the lender, and never gave it a chance to cross-examine or rebut that evidence before deciding the case. The Court held that Articles 47 and 50 are "the bedrock of Kenyan jurisprudence," not a technicality to be waived, and set the whole determination aside on that basis alone — while also flagging that KES 400,000 looked high absent proof of actual loss.

Practice pointIf the ODPC relies on evidence a respondent has not seen — a witness statement, a site-visit note, an internal memo — that alone is enough to unwind the entire determination on appeal, regardless of how strong the underlying case looks.
Cite this page: Muchangi Patrick & Co. Advocates, "Undisclosed witness evidence sinks a KES 400,000 award: Platinum Credit Limited v Data Protection Commissioner & Another" (dataprivacyadvocates.co.ke, 2026) <https://dataprivacyadvocates.co.ke/case-platinum-credit-limited-v-data-protection-commis.html>.
How this touches a live ODPC matter

Whether you are defending a complaint, appealing a determination, or bringing a privacy claim of your own, the forum you choose and the procedural record you build early usually decide the outcome.

Muchangi Patrick & Co. Advocates represents complainants and respondents before the Office of the Data Protection Commissioner and on appeal, judicial review and constitutional petition before the High Court.

Continue reading
All Case Notes on the Blog
A spam folder bought a lender an injunction against a garnishee →