Douglas Muiruri Mbugua Vs Standard Chartered Bank Kenya Limited

1. Introduction

Parties:

• Complainant: Douglas Muiruri Mbugua (former employee)
• Respondent: Standard Chartered Bank Kenya Limited

Core Issue: Alleged unlawful recording and use of employee telephone conversations under Kenya’s Data Protection Act, 2019.

2. Background of Complaint

Key Events:

• Employee from 21/09/2015 to 10/03/2022
• Terminated for alleged corruption
• Complaint filed 16/04/2023 regarding recorded call used in termination
• Claimed violation of Sections 26, 29 and 30 of DPA 2019

3. Key Violations Alleged

1. Unauthorized Processing:
   • Recording of private call without consent
   • Use as evidence in termination proceedings
2. Notification Failure:
   • Alleged breach of Section 29 notification requirements
3. Consent Deficiency:
   • No valid consent under Section 30
   • Psychological harm from processing

4. Respondent’s Defense

• Contractual Basis:
  • Clause 20 of employment contract authorized monitoring
  • Signed consent to processing in Clause 25.1
• Legal Justifications:
  • Court order to use recording as evidence
  • Legitimate interest under Section 36
• Compliance Proof:
  • Provided Telephone Recording Standard policy
  • Submitted Speaking Up and Investigations policies

5. ODPC’s Determination

Legal Findings:

• Section 25: Processing aligned with data protection principles
• Section 29: Notification fulfilled through employment contract
• Section 30: Valid legal basis (contract performance)
• Section 36: Bank’s legitimate interest overrode objections

6. Final Ruling

1. No rights violation found
2. Notification duty properly fulfilled
3. Valid legal basis established
4. Complaint dismissed

7. Significance of the Case

This ruling establishes important workplace privacy precedents:

• Employment Contracts: Valid as notification mechanism for monitoring
• Banking Sector: Clarifies use of recorded communications in investigations
• Legitimate Interest: Demonstrates balancing test between employer/employee rights
• Judicial Integration: Affirms court orders as valid processing basis
• Employee Awareness: Highlights importance of contract review for data clauses