ODPC COMPLAINT NO. 0781 OF 2023
1. Introduction
This case involved a complaint by Koros Kiproitch against the Higher Education Loans Board (HELB) regarding inaccurate loan repayment records and failure to update his credit status despite having cleared his loan.
Table of Contents
2. Nature of Complaint
- Complainant had fully repaid HELB loan but records still showed default status
- Despite having CRB clearance certificate, HELB portal showed inaccurate information
- Alleged violation of right to accurate data under Section 25(f) of Data Protection Act
- Failure to update records affected complainant’s credit profile
3. Respondent’s Position
- Acknowledged complainant had cleared loan but maintained default history would remain
- Admitted delay in updating records with credit bureaus
- Provided loan statements showing repayment completion
- Highlighted ongoing system integrations with CRBs through APIs
- Submitted Data Protection Policy and Registration Certificate as evidence of compliance
4. Key Issues
- Data Accuracy:
- Whether HELB maintained accurate records as required by Section 25(f) DPA
- Timeliness of updates to credit reference bureaus
- Rectification Rights:
- Compliance with Section 40 DPA on rectification of inaccurate data
- Procedures for data subjects to correct errors
5. Rights Violations
Section 25(f) DPA Violation:
- Failure to keep personal data accurate and up-to-date
- Delay in rectifying inaccurate default status
Section 26(d) Violation: Denial of right to correction of false/misleading data
Section 40 Violation: Failure to rectify inaccurate data without undue delay
6. Final Determination
Findings:
- HELB found liable for violating complainant’s data protection rights
- Ordered to rectify records within 7 days
- Failure to comply will result in enforcement notice
- Right of appeal to High Court preserved
7. Significance of the Case
Student Loan Management
- Establishes clear accountability for education loan data accuracy
- Mandates timely updates to credit reference bureaus
- Sets precedent for handling of historical default records
Credit Reporting
- Clarifies obligations regarding shared data with CRBs
- Requires synchronization between lenders and credit bureaus
- Affirms right to accurate credit history reporting
Data Rectification
- Reinforces data subjects’ right to timely corrections
- Sets 7-day benchmark for rectification compliance
- Establishes consequences for non-compliance
Public Institutions
- Holds government entities to same data protection standards
- Mandates proper data governance systems
- Requires API integrations for real-time updates
Broader Impact: This ruling compels all educational lenders to implement robust systems for maintaining accurate loan records and timely updates to credit bureaus, while protecting borrowers’ rights to fair credit reporting.
For full determination, click 🗃️
