A New Era for Digital Privacy: High Court underscores the role of the Data Protection Commissioner

Introduction: Protecting Image Rights in the Digital Age

The High Court of Kenya recently delivered a significant decision in the case of Liburuwen Lasanguru Kweri v. Beehive Media Limited; Capwel Industries Limited (Interested Party), marking a pivotal moment for privacy rights under Kenya’s Constitution and Data Protection Act. This case centered on the unauthorized use of the petitioner’s image in a commercial advertisement by the respondent, Beehive Media Ltd., on behalf of Capwel Industries Ltd. The judgment underscores the role of the Data Protection Commissioner in handling privacy infringement complaints, setting a precedent on the process and remedies for digital privacy claims.

Case Background: Unapproved Image Use Sparks Legal Battle

The petitioner, Liburuwen Lasanguru Kweri, claimed that Beehive Media Ltd. published his image in a social media advertisement for Capwel Industries Ltd.’s product, Soko Maize Flour, without his consent. The posts, which appeared on platforms with a large follower base, led to public misperception that he had endorsed the product, causing Kweri reputational harm and emotional distress. Aggrieved, Kweri sought a permanent injunction to prevent further unauthorized use of his image, alongside general, exemplary, and punitive damages for defamation, mental anguish, and privacy invasion.

Court’s Analysis: The Exhaustion Doctrine and Jurisdiction

Justice Mrima’s decision emphasized the doctrine of exhaustion under the Data Protection Act, which requires privacy complaints under Article 31(c) and (d) to be first addressed by the Data Protection Commissioner. The court acknowledged that while the Commissioner cannot interpret the Constitution, it holds the authority to determine whether privacy rights have been violated under the Bill of Rights.

This approach reflects a structured pathway for privacy rights redress, encouraging the Data Protection Commission as the first forum for privacy-related complaints before escalating to the High Court. The court held that Kweri’s petition should have initially been submitted to the Commissioner, barring any exceptions to the exhaustion requirement.

Key Takeaways and Precedents Established

  1. Role of the Data Protection Commissioner: The Judgment underscores the Commissioner’s critical role in investigating and providing remedies for privacy infringements. This role includes the authority to impose compensation for proven damages without needing the court’s intervention initially.
  2. Defining Constitutional and Statutory Jurisdiction: The court clarified that the High Court retains exclusive jurisdiction for interpreting the Constitution, while the Commissioner focuses on statutory protections under the Data Protection Act.
  3. Importance of Consent in Commercial Use of Personal Data: The decision reinforces that companies must secure individuals’ consent before using personal data, including images, for commercial purposes. This aligns with global standards on privacy and personal data protection.
  4. Exceptions to the Exhaustion Doctrine: Although the doctrine of exhaustion generally applies, the court highlighted circumstances under which direct judicial intervention may be permissible—such as when there are urgent constitutional matters at stake or where an existing statutory body lacks adequate redress capabilities.

Conclusion:

This case reinforces the need for individuals and businesses to be vigilant and respectful of privacy rights, especially in the digital advertising space. For legal professionals, this Judgment provides a framework for handling privacy violation claims and advocates for clients’ rights. As Kenya’s legal landscape continues to evolve, the role of the Data Protection Commissioner and related protocols will undoubtedly influence future privacy disputes.


Stay informed about Kenya’s privacy law developments. Subscribe to our newsletter for the latest legal insights and case analysis, and learn how we can assist in navigating complex digital privacy issues and protecting your data rights.