HILDA MUSIMBI ANYAMA ON BEHALF OF MINOR LK VERSUS FRIENDS SCHOOL KEVEYE GIRLS HIGH SCHOOL
1. Introduction
The dispute in this matter arises from Hilda Musimbi Anyama’s complaint against Friends School Keveye Girls High School on the recording and posting of a video of a minor serving punishment, which went viral and exposed the minor’s identity without the guardian’s knowledge or consent. This action is in gross violation of the Data Protection Act, 2019.
Table of Contents
2. Nature of Complaint
The Respondent’s Deputy Principal recorded a video of the minor serving a punishment (destruction of a mobile phone) and the video was posted on social media where it went viral, resulting in widespread exposure of the minor’s identity and circumstances without the Complainant’s knowledge or consent. This constituted a grave violation of the minor’s right to privacy and subjected her to public ridicule.
3. Analysis of Evidence
Complainant’s Position
- She has served as the legal guardian of her niece since age eight, assuming full responsibility for her care and education
- The Respondent’s Deputy Head Teacher recorded a video of the minor serving a punishment (destroying a mobile phone)
- Without her express consent or prior knowledge, the video was posted on social media and went viral
- The unauthorized disclosure has subjected the minor to public ridicule and compromised her dignity
- Adduced the video, screenshots from social media platforms, the minor’s birth certificate, and WhatsApp conversations as evidence
Respondent’s Defense
- Denied having published or disseminated the video on social media
- Claimed it does not have an account or participate in social media activities on sites like Facebook or Twitter (X)
- Admitted the video was taken by the Deputy Principal on 20th July 2024 for legitimate administrative purposes and intended solely for internal use
- Claimed the video was shared with the Chief Principal and the Executive Parents Teachers Association to provide evidence of rule enforcement
- Took action to have the video taken down once it was noticed on social media
4. Issues for Determination
- Whether the Respondent fulfilled its obligations under the Act
- Whether the Complainant is entitled to any remedies under the Act
5. Final Determination
The Data Commissioner found:
- The Respondent recorded and disseminated a video of a minor serving punishment without guardian consent.
- The video went viral, exposing the minor’s identity and causing public ridicule and humiliation.
- The Respondent failed to apply data minimization and deidentification techniques for the minor’s data.
- The Respondent is liable for violation of the minor’s rights under the Act.
Orders:
- An Enforcement Notice is issued against the Respondent.
- Right of appeal to the High Court within 30 days.
6. Significance and Impact
Data Protection for Minors in Schools
- Establishes that schools must comply with data protection principles when recording and processing minors’ personal data
- Even for legitimate administrative purposes, schools must inform guardians of the recording and processing
Section 33 of the Act – Processing of Children’s Data
- Confirms that processing of children’s data must advance the rights and best interests of the child
- Deidentification or anonymization should be applied where possible
Broader Impact: This ruling confronts the practice of schools using disciplinary recordings without regard for minors’ privacy. It establishes that the recording and dissemination of children in vulnerable moments is a serious violation that exposes educational institutions to liability, requiring them to adopt a privacy-first approach when handling students’ personal data.