• The restaurant incurred the fine because it violated data privacy rights and failed to comply with the Data Protection Act.

Casa Vera Lounge has incurred a fine of Sh1.8 million for sharing a photo of a customer on its social media platform without obtaining the customer’s permission. The Office of Data Protection Commissioner (ODPC) imposed this penalty because the restaurant violated data privacy rights and failed to adhere to the Data Protection Act.

 

The ODPC stated that this fine should serve as a cautionary example for other lounges and clubs, emphasizing the importance of always seeking consent from customers before posting their pictures online.

Similarly, Roma School, a mixed day and boarding primary school in Uthiru, received a total fine of Ksh. 4.55 million for posting images of a minor without obtaining parental consent. This marked the first and most substantial penalty imposed on an educational institution, sending a clear message to schools and facilities handling minors’ personal data that parental/guardian consent must be obtained before processing such data.