Kenyan digital lender Whitepath fined $2,000 for unlawful data use in second privacy violation

Kenya’s Office of the Data Protection Commissioner (ODPC)  has fined digital lender Whitepath KES 250,000 ($2,000) for violating data privacy laws. Court records show that the regulator found that Whitepath, which operates Instarcash and Zuricash loan apps, listed an individual as a guarantor without their consent and subjected them to debt collection calls after the borrower defaulted.

The fine—the company’s second in two years—adds to growing regulatory pressure on Kenyan digital lenders, who are scrutinized for aggressive debt collection tactics and mishandling customer data.

According to court documents seen by TechCabal, Dennis Caleb Owuor received an unexpected debt collection call from a Whitepath representative in November 2024. The caller claimed Owuor was listed as a guarantor for a defaulting borrower, despite Owuor having no prior agreement to such an arrangement. When he questioned the claim, the caller failed to provide any justification but continued to demand repayment. Despite Owuor’s instructions to stop, the calls persisted, prompting him to escalate the matter to the ODPC, alleging illegal privacy breaches and harassment.

Whitepath failed to respond to the regulator’s inquiries, but  Kenya’s Data Protection Act allows enforcement regardless. The ODPC ruled that Whitepath had no legal basis to process the complainant’s data, as listing someone as a guarantor requires explicit consent— which was never obtained. The company also violated data protection laws by failing to notify them that their data was being used.

In addition to the fine, the regulator directed Whitepath to erase the complainant’s data and provide proof of compliance.

This is not Whitepath’s first data privacy violation. In April 2023, the ODPC fined the lender KES 5 million ($39,000) after nearly 150 complaints alleging unauthorised access to borrowers’ contact lists and sending unsolicited messages. The penalty came after Whitepath ignored an earlier enforcement notice.

Whitepath did not immediately respond to a request for comment.

The case highlights ongoing regulatory action against digital lenders using unethical data practices, including extracting contact details from borrowers’ phones, sharing debtor information publicly, and employing aggressive collection tactics.

While enforcement is increasing, concerns remain over whether current penalties are sufficient. A KES 250,000 ($2000) penalty may not significantly deter a firm that disregarded a KES 5 million fine in 2023. Stronger regulatory measures, including larger fines and criminal liability for repeat offenders, may be required to ensure compliance and protect consumer rights.

ObadeYemi

Adeyemi is a certified performance digital marketing professional who is passionate about data-driven storytelling that does not only endear brands to their audiences but also ensures repeat sales. He has worked with businesses across FinTech, IT, Cloud Computing, Human Resources, Food & Beverages, Education, Medicine, Media, and Blockchain, some of which have achieved 80% increase in visibility, 186% increase in month on month sales and revenue.. His competences include Digital Strategy, Search Engine Optimization, Paid per Click Advertising, Data Visualization & Analytics, Lead Generation, Sales Growth and Content Marketing.

Recent Posts

Kenyan court orders Twiga Foods to pay ex-employee $7,800 for unfair dismissal

Twiga Foods, a Kenyan B2B startup, has been ordered to pay a former sales representative…

4 hours ago

AI email subject lines that drive 3x more revenue and actually convert [+ exclusive insights]

Email subject lines determine whether your carefully crafted campaigns ever see the light of day…

11 hours ago

Why SurveyMonkey’s Marketing Leader Says Your Foundation Is Broken

The way most marketing teams approach AI is probably the way I approach my inbox…

13 hours ago

Why most go-to-market playbooks fail internationally — and what to do instead

I first worked across borders in the mid‑90s, interpreting Spanish calls for AT&T. What struck…

13 hours ago

Enterprise generative AI tools that actually work

TL;DR: Enterprise generative AI tools are advanced software platforms designed to automate and enhance marketing,…

4 days ago

Can music influence what we buy? To find out, I dove into the psychology of music

In the first episode of my Nudge podcast, I interviewed the fantastic psychologist Dr. Adrian…

5 days ago