The Office of the Data Protection Commissioner (ODPC) has found LOLC Kenya Microfinance Bank Limited liable for unlawfully processing and publishing a former employee’s personal data without consent.

• The bank posted a former employee’s images and details on its social media platforms, breaching the Data Protection Act 2019.
• Key parties involved are the ODPC, Data Commissioner Immaculate Kassait, and LOLC Kenya Microfinance Bank Limited.
• The ODPC ordered the bank to delete the data within 14 days and recommended prosecution of directors for obstruction, facing potential fines of up to Sh5 million or a two-year jail term.