DENNIS GATHARA VERSUS GOODTIMES AFRICA
1. Introduction
This dispute concerns Dennis Gathara’s complaint against Goodtimes Africa on the constant sending of unsolicited promotional text messages without obtaining his consent, and the Respondent’s failure to respond to his request for cessation and deletion. This action offends the Data Protection Act, 2019.
Table of Contents
2. Nature of Complaint
The complainant received unsolicited promotional text messages promoting the Respondent’s events without his consent. He reached out to the Respondent requesting cessation of communication and deletion of his personal data, but the request was neither responded to nor complied with. The SMS messages did not contain an opt-out mechanism, and attempts to unsubscribe through Safaricom’s options were unsuccessful.
3. Analysis of Evidence
Complainant’s Position
- Provided screenshots of unsolicited text messages promoting the Respondent’s events
- Did not consent to the use of his personal data for direct marketing purposes
- Reached out to the Respondent via email requesting cessation and deletion, but the request was ignored
- The SMS messages did not contain an opt-out mechanism as required under the Regulations
Respondent’s Defense
- Stated it had addressed the complaint and implemented an SMS opt-out feature
- Claimed it is in the process of updating its website’s terms and conditions
- Is working on a clickthrough feature for audiences to accept terms before purchase
- Did not submit any evidence to prove implementation of the opt-out feature
4. Issues for Determination
- Whether the Respondent fulfilled its obligations under the Act
- Whether there was a violation of the Complainant’s rights under the Act
- Whether the Complainant is entitled to any remedies under the Act and the attendant Regulations
5. Final Determination
The Data Commissioner found:
- The Respondent sent unsolicited promotional messages without obtaining the Complainant’s consent.
- The Respondent failed to respond to the Complainant’s request for cessation and deletion.
- The SMS messages lacked a visible and clear opt-out mechanism.
- The Respondent is liable for violation of the Complainant’s rights under the Act.
Orders:
- Compensation of Ksh 700,000 to the Complainant.
- The Respondent is directed to erase the Complainant’s personal data from its database/records within 14 days.
- The Respondent is directed to stop sending marketing messages to the Complainant.
- An Enforcement Notice is issued against the Respondent.
- Right of appeal to the High Court within 30 days.
6. Significance and Impact
Direct Marketing and Consent
- Reinforces that data controllers must obtain express consent for direct marketing
- Promotional messages must include a visible, clear, and easily understood opt-out mechanism
Right to Object and Right to Erasure
- Reinforces the absolute right to object to processing for direct marketing purposes
- Data controllers must respond to erasure requests within 14 days
Broader Impact: This ruling offers a crucial lesson for businesses across Africa that rely on bulk messaging for marketing: ignoring consumer objections and failing to provide opt-out mechanisms erodes trust and exposes organizations to significant liability. In the digital age, respecting consumer autonomy is not merely a legal formality but a cornerstone of sustainable commercial relationships.