Platinum Credit now finds itself at the centre of a costly and embarrassing situation after the Office of the Data Protection Commissioner ruled that the company misused the personal information of a Kenyan citizen.
The case started when Samuel Kamau raised a complaint about receiving repeated calls, text messages and loan promotion alerts from the lender even though he had never shared his personal data with them.
What looked like a simple case of unwanted marketing turned into a clear example of how companies violate the privacy of ordinary Kenyans without thinking about the consequences.
Kamau explained to the ODPC that he had no relationship with Platinum Credit, yet the company kept pushing marketing messages to him.
These messages were not just irritating but also intrusive, especially because they were based on personal information he never provided.
He made it clear he had never applied for a loan, never filled out any form and never permitted the lender to contact him in any way. For him, the issue was not just the disturbance but the bigger question of how the company got his data in the first place.
When the regulator began its investigations, Platinum Credit tried to distance itself from the matter. The company claimed the caller who contacted Kamau was not its agent and attempted to shift blame away from itself. However, the ODPC dug deeper and confirmed that the woman who made the calls was indeed working on behalf of the lender.
This discovery strengthened Kamau’s case and proved that the company had knowingly used his personal details without following the law.
The Data Commissioner concluded that Platinum Credit had processed Kamau’s data unlawfully. Instead of following proper procedures and seeking consent, the company had chosen to use shortcuts.
This decision exposed them to legal consequences, and the ODPC acted firmly. The regulator ordered Platinum Credit to pay Kamau Ksh 400,000 in compensation for violating his privacy and causing him distress.
This compensation was not just about money but also a reminder that every Kenyan has a right to control how their personal information is used.
In addition to the fine, the ODPC issued an enforcement notice requiring the company to correct its practices. The Commissioner also recommended that the directors be prosecuted for giving false information during the investigation. This recommendation shows that the regulator wants companies to understand that honesty is expected when dealing with official inquiries.
The case has now become an important lesson for firms that handle customer data. It shows that companies cannot collect, use or share personal information without permission. Kenyans are becoming more aware of their data rights, and regulators are taking violations seriously.
Platinum Credit’s experience will likely push other firms to review their practices to avoid similar penalties in the future.
