← Muchangi Patrick Published Work
⇩ Download PDF
Muchangi Patrick & Co. Advocates logo Muchangi Patrick & Co. Advocates ← Back to the Blog

Case Note

Case Notes & Commentary
ODPC & High Court, Kenya
One ruling, digested on its own — the facts, the holding, and the practice point
[2026] KEHC 3415

Consent to the old company does not transfer to whoever buys the business

Tulia Amboseli Safari Camp Limited v Opiyo & 2 Others

Quantum reduced on appeal Case Note Data Protection · Administrative Law
By the Editorial Board, Muchangi Patrick & Co. Advocates

A company that had acquired a going concern — including its website and digital assets — continued to display images of two former employees of the previous business for commercial promotion. The ODPC awarded each complainant Kshs 500,000. On appeal, the Court held that continued hosting and public display of the images was itself "processing" under the Act, that the acquiring company had produced no evidence of consent for that continued, post-acquisition use, and that consent given to the previous company did not automatically transfer to the new owner or extend to a new commercial purpose. The Court did, however, find the quantum excessive and reduced each award to Kshs 300,000, while confirming that the absence of an oral ODPC hearing had not itself denied the appellant a fair hearing.

Practice pointBuying a business as a going concern does not buy the consent that came with its old employees' images — due diligence on digital assets should specifically flag any personal data or images still in active commercial use.
Cite this page: Muchangi Patrick & Co. Advocates, "Consent to the old company does not transfer to whoever buys the business: Tulia Amboseli Safari Camp Limited v Opiyo & 2 Others" (dataprivacyadvocates.co.ke, 2026) <https://dataprivacyadvocates.co.ke/case-tulia-amboseli-safari-camp-limited-v-opiyo-and-2.html>.
How this touches a live ODPC matter

Whether you are defending a complaint, appealing a determination, or bringing a privacy claim of your own, the forum you choose and the procedural record you build early usually decide the outcome.

Muchangi Patrick & Co. Advocates represents complainants and respondents before the Office of the Data Protection Commissioner and on appeal, judicial review and constitutional petition before the High Court.

Continue reading
← A signed consent letter and a "looks okay" WhatsApp reply defeat an unauthorised-image claim
All Case Notes on the Blog
Persistent calls, secret filming and a WhatsApp group about a neighbour cost Kshs 1 million →