Platinum Credit Limited has become a major example of how companies in Kenya misuse people’s personal data without consent. The firm recently faced action from the Office of the Data Protection Commissioner (ODPC) after using a citizen’s phone number for marketing without permission.
This incident has drawn wider attention because it reflects a much bigger problem affecting many Kenyans today.
The case involved Samuel Kamau Waweru, who received repeated loan messages and calls from Platinum Credit even though he had never shared his contact details with the company.
He filed a complaint in November 2024, saying the constant promotions invaded his privacy and made him uncomfortable.
After reviewing the complaint, the ODPC discovered that Platinum Credit not only contacted him unlawfully but also gave false information during the investigation by claiming the caller was not their agent.
Further checks confirmed the person was indeed working for them.The ODPC ruled that Platinum Credit violated the Data Protection Act of 2019 by processing Kamau’s personal information without consent.
The law clearly requires companies to get permission before using data for advertising. The commissioner also noted that the company breached Article 31 of Kenya’s Constitution, which protects every person’s right to privacy.
For these violations, Platinum Credit was ordered to pay Kamau 400,000 shillings in compensation. The regulator also issued an enforcement notice demanding the company stop its unlawful practices immediately and recommended criminal charges against its directors for giving false statements.
Kamau’s case is not the only one. ODPC records for 2025 show similar complaints from several people, including Sharomo Wario Issacko, Aori Chris Kipkorir, and Joseph Githinji Kimani.
These cases point to a trend where Platinum Credit obtains phone numbers from unclear sources and aggressively pushes loan advertisements.
Many Kenyans face this problem daily, receiving unsolicited messages from financial and betting companies. In many situations, such data is bought from brokers or collected through leaks in other apps.
Platinum Credit failed to explain how it accessed Kamau’s number, which further violated the rules requiring transparency in data collection.
Public reaction online shows how common this issue is. A post shared by a lawyer on X (formerly Twitter) about Kamau’s ruling received thousands of likes and reposts.
Many Kenyans shared their own experiences of receiving nonstop promotional texts. One person said they felt overwhelmed by the messages and planned to file a complaint.
Others suggested pushing for a class action lawsuit to represent everyone affected. Some also pointed out that betting companies use similar methods and should be held accountable too.
Commentators described the ruling as a turning point that signals stronger enforcement of data rights.
This situation highlights more than just inconvenience. Unwanted calls and texts can cause stress, waste time, and pressure people into financial decisions they did not plan for. The Data Protection Act was created to prevent exactly these problems, but enforcement has been slow.
The fine against Platinum Credit may seem small compared to the size of the company, but it sends a clear message that misuse of personal data carries consequences. It also gives value to the harm suffered by individuals who have been ignored for years.
Kenyans who face similar violations can easily report them through the ODPC website by submitting details of the company and evidence of the messages. A lawyer is not required at the start. If more people take this step, it could lead to stronger rules and greater accountability in the financial sector.
The ruling against Platinum Credit has already been cited by legal experts as a warning to all companies handling customer data.
