Company Fined Sh500,000 for Using Former Employee’s Photo in Ads
The ODPC determined that the prolonged display of the photograph constituted commercial processing of personal data. This practice violated Section 37 of the Data Protection Act, 2019, which strictly requires express consent for commercial data use unless otherwise authorized by law.
