The real test of data protection compliance

Over six years into the implementation of the Data Protection Act of 2019, the Office of the Data Protection Commissioner (ODPC) found that Wananchi Group, trading as Zuku Fibre Kenya, breached the law by failing to provide a former customer with a workable avenue to object to the processing of his personal data. The ODPC awarded compensation to the customer, emphasizing the need for a functioning mechanism for individuals to exercise their rights. This case highlights corporate negligence in managing former customers' data.