The wider concern around Platinum Credit goes far beyond a single complaint, and many Kenyans have increasingly questioned how the company handles people’s personal information.
For years, stories have surfaced about lenders using phone numbers, contact lists, and other private details in ways that customers never agreed to.
This latest case adds to those concerns, showing once again how easily personal data can be misused when strong safeguards are ignored.
In the recent decision, the Office of the Data Protection Commissioner (ODPC) ruled that Platinum Credit must pay Ksh. 400,000 to a Kenyan man, Samuel Kamau, after the company repeatedly contacted him using information he never shared with them.
He explained to the ODPC that the lender sent him loan promotions, marketing text messages, and calls without his permission.
He had never signed up for their services, never applied for a loan, and never gave them his mobile number for any purpose.
Despite this, the company aggressively pushed their products to him, causing inconvenience and raising questions about where they obtained his details.
The ODPC launched an investigation to understand exactly what happened.
During the process, Platinum Credit claimed that the person calling Kamau was not their agent. This statement was later proven false. Investigators confirmed that the caller was indeed working for the company, meaning Platinum Credit had knowingly or unknowingly provided misleading information during the inquiry.
This made the situation more serious because it suggested not just a breach of data privacy, but also dishonesty during the regulatory process.
After reviewing all the evidence, the Data Commissioner found Platinum Credit responsible for unlawful data processing. In simple terms, this means the company used someone’s personal information without consent, without a legal reason, and without following the rules that protect Kenyans from such practices.
The Commissioner ordered the company to compensate Kamau with Ksh. 400,000 as a way of acknowledging the harm caused by their actions.
Beyond that, the ODPC issued an enforcement notice to force the company to correct its practices and ensure it follows the law going forward. The regulator also recommended the prosecution of Platinum Credit’s directors for giving false information during the investigation, a step that shows how seriously the office takes both data protection and truthfulness in official inquiries.
This case highlights a bigger pattern that many Kenyans have complained about for years companies collecting or buying people’s data, then using it for marketing, harassment, or pressure without consent.
It reminds the public that personal data is protected by law and that lenders, marketers, and digital platforms must respect that protection.