ODPC COMPLAINT NO. 0607 OF 2023
1. Introduction
This case involved Perpetual Wanjiku’s complaint against Casa Vera Lounge for unauthorized use of her image on social media platforms, constituting an alleged violation of Kenya’s Data Protection Act, 2019.
Table of Contents
2. Nature of Complaint
- Unauthorized use of complainant’s image on Instagram/Facebook
- Commercial use without consent (posted with caption “About last night”)
- No written apology despite demand letter
- Kshs. 5M compensation sought citing privacy violation precedents
3. Analysis of Evidence
Complainant’s Position:
- Provided evidence of matching images
- Cited violation of Article 31 of Constitution
- Referenced similar cases (MWK v AG, Ann Njoki cases)
Respondent’s Defense:
- Claimed posted privacy notice at entrance
- Alleged photographer obtained verbal consent
- Removed images when objected
- Developing internal data privacy policy
4. Issues for Determination
- Duty to notify under Section 29 of DPA
- Validity of consent under Section 32
- Remedies entitlement
5. Final Determination
Findings:
- Privacy notice was insufficiently visible
- No valid consent obtained (failed Section 32 test)
- No compensation awarded due to image removal
- Enforcement notice issued against respondent
6. Significance
- Clarifies requirements for valid consent in entertainment venues
- Establishes insufficiency of blanket privacy notices
- Reinforces need for explicit consent for commercial image use
- Sets precedent for social media privacy violations
For full determination, click 🗃️

