Kenya: Eldoret Hospital to Pay Sh525,000 Over Patient Data Breach

Kenya: Eldoret Hospital to Pay Sh525,000 Over Patient Data Breach

Nairobi -- The Office of the Data Protection Commissioner (ODPC) has found St Luke's Orthopaedic and Trauma Hospital liable for unlawfully disclosing a patient's sensitive medical information and ordered it to pay Sh525,000 in compensation.

Data Commissioner Orders Hospital to Pay Sh525,000 for Mishandling Patient’s Medical Data

NAIROBI, Kenya Apr 16 – The Office of the Data Protection Commissioner (ODPC) has found St Luke’s Orthopaedic and Trauma Hospital liable for unlawfully disclosing a patient’s sensitive medical information and ordered it to compensate the complainant Sh525,000. In a determination issued under the Data Protection Act, 2019, Data Commissioner Immaculate Kassait ruled that the hospital violated data protection principles after mishandling and incorr…

Eldoret Hospital Ordered to Pay KSh 525,000 Over Patient Data Breach

A healthcare facility in Eldoret has been ordered to compensate a patient KSh 525,000 after Kenya’s data protection regulator found it unlawfully disclosed sensitive medical information and failed to safeguard patient records. In a determination issued on March 16, 2026, the Office of the Data Protection Commissioner (ODPC) ruled in favour of Merceline Akoth Odeyo … The post Eldoret Hospital Ordered to Pay KSh 525,000 Over Patient Data Breach ap…