The Digital Financial Services Association of Kenya (DFSAK), representing digital lenders in Kenya, has accused the Central Bank of Kenya (CBK) of overstepping its mandate by attempting to regulate their customer data management. This alleged overreach, alongside overlapping mandates from other regulators, is creating significant operational challenges for the lenders.

• ODPC has received 5,284 complaints since 2021 regarding unlawful access to personal data, lack of transparency, and consent issues.
• Kevin Mutiso, Chair of DFSAK, expressed concerns about regulatory overreach by CBK regarding the data aspect of their business.
• The lack of clear processes for consumer complaints causes confusion, often leading to an intersection of data protection issues being channeled to multiple authorities like CAK and CBK.