In the case of Sheila Lulu Okong’o v Motown Group Limited, the complainant alleged that the respondent, a microfinance company, increased loan deductions without authorization. Despite the complaint, the respondent didn't respond. The issues centered on potential violations of the Data Protection Act regarding the complainant's rights to information, consent, and remedies.
The Office of the Data Protection Commissioner (ODPC) found the respondent in breach of various sections of the Act, ruling that the complainant had the right to be informed, access personal data, and object to data processing. The respondent failed to prove consent for processing personal data and didn't respond to the complaint. Thus, the ODPC held the respondent liable for unlawfully deducting funds and infringing the complainant's rights. Consequently, the respondent was ordered to refund the deducted amount, pay compensation for infringement, and provide documents related to the disputed loan application.