11/07/2026
Nairobi Academy has been ordered to pay Ksh. 637,500 for unlawfully publishing a minor’s personal data and examination results for commercial gain. The ODPC found that the school featured the child’s identifiable information in an “Advertising Feature” in the Daily Nation on August 21, 2025, without obtaining parental consent, using the publication to market the institution.
The breach was termed deliberate and aggravated because the parent had already objected to such use and had received assurances that no further disclosures would be made. Despite this, the school proceeded, exposing the minor’s academic performance to the public. The ODPC held the institution liable under the Data Protection Act, 2019, and awarded compensation for the resulting harm and distress.
From Thuranira
