DTB fined Sh500,000 for data privacy breach
Diamond Trust Bank Kenya and its Uganda subsidiary have been ordered to pay Sh500,000 in compensation after the ODPC ruled they violated Kenya’s Data Protection Act, mishandling a customer’s financial data and breaching privacy rights...
✨ Key Highlights
Diamond Trust Bank (DTB) Kenya and its Uganda subsidiary have been fined a combined Sh500,000 for breaching Kenya's Data Protection Act, 2019. The ruling by the Office of the Data Protection Commissioner (ODPC) follows a complaint regarding mishandling of customer data.
- The banks were ordered to pay Sh250,000 each to the complainant, Aaditi Rajput.
- The Data Commissioner, Immaculate Kassait, emphasized that this ruling sets a precedent for accountability in Kenya’s financial sector.
- DTB Kenya failed to verify an account before activating a "Do Not Contact" request, while DTB Uganda linked the complainant’s account to a third party without consent, violating data accuracy and privacy principles.
Continue Reading
Read the complete article from Capital Business
Part of the Day's Coverage
Regulators Fine Directline Assurance and DTB; Petitioners Appeal High Court Seed Law Ruling - December 2025
The Competition Authority of Kenya (CAK) has fined Directline Assurance Company Limited 85 million Kenyan Shillings for abusing its buyer power against two small motor vehicle repair firms, Kilele Motors Limited and Midland Autocare Limited. In a separate regulatory action, the Office of the Data Protection Commissioner (ODPC) fined Diamond Trust Bank (DTB) Kenya and its Uganda subsidiary a combined Sh500,000 for breaching Kenya's Data Protection Act, 2019, following a complaint about mishandling customer data. Meanwhile, in a legal matter, a coalition of 15 petitioners, including smallholder farmers and Greenpeace Africa, have filed an appeal against a High Court decision. The petitioners contest the ruling that overturned significant sections of Kenya's Seed and Plant Varieties Act.
