A fresh surge in privacy breaches by digital lenders has triggered fines from the data protection watchdog and turned focus on the Central Bank of Kenya (CBK), which recently introduced new laws to tame rogue players.
In the latest development, mobile lenders Whitepath, Platinum Credit, and Rocketpesa have been ordered to pay a combined Sh2.25 million in fines for privacy breaches—joining a growing list of sanctioned digital lenders and putting them at risk of drawing the CBK’s attention to enforce the regulations it introduced in 2022 to tame exploitative loans rates, abuse of personal data and unorthodox debt recovery strategies.
