The Office of the Data Protection Commissioner (ODPC) has issued a penalty notice to Oppo Kenya for failing to follow an enforcement notice that was issued against the company.
The enforcement notice was issued because Oppo Kenya violated the privacy of a complainant by using their photo on the company’s Instagram account without the complainant’s consent.
The penalty notice was issued according to the Data Protection Act and related regulations in Kenya, and Oppo Kenya has been ordered to pay a fine of 5 million Kenyan shillings.
In addition to not paying the fine, Oppo Kenya has also failed to provide a data protection policy or evidence of an internal complaints mechanism, as required by the enforcement notice.
The Data Protection Commissioner, Immaculate Kassait, has emphasized the importance of complying with data protection laws and has urged companies to implement appropriate safeguards for the collection, storage, and processing of personal data.
It is essential for companies to respect the privacy of their customers and to follow the laws and regulations that are in place to protect personal data.
Failure to do so can result in serious consequences, including fines and damage to a company’s reputation. It is important for companies to implement strong data protection policies and to ensure that they are following the necessary procedures to protect the personal information of their customers.
By doing so, companies can build trust with their customers and avoid the potential consequences of noncompliance with data protection laws.
“ODPC urges Data Controllers and Data Processors to ensure that the processing of personal data is in accordance with the provision of the Act. Failure to comply with the Act will result in instituting enforcement procedures,” she remarked.