Antony Mwenda Kinoti, son of former Directorate of Criminal Investigations (DCI) boss George Kinoti, has secured another legal win after the Office of the Data Protection Commissioner ruled that Aventus Technology Limited violated his rights by using his personal data without consent.
Mwenda had filed a complaint accusing the company of unlawfully using his personal information to register and process a loan application without his knowledge or authorization—an action he claimed was a breach of his constitutional right to privacy under Article 31.
According to Mwenda, he discovered on June 19, 2024, that his National ID number had been used through Aventus’s online platform to register a loan. He stated he had never applied for such a loan nor given permission for his details to be used.
Upon contacting Aventus’s customer support for clarification, he was informed that his National ID was linked to a foreign phone number unfamiliar to him. However, the company declined to disclose the specific number associated with his ID.
After reviewing submissions from both sides, the Office of the Data Protection Commissioner concluded that Aventus Technology Limited had indeed unlawfully processed Mwenda’s personal data. The agency ordered the company to pay Mwenda Ksh 200,000 as compensation for the breach.
This ruling comes just four months after a similar decision in January 2025, in which Ceres Tech Limited was ordered to compensate Mwenda Ksh 700,000 for a comparable violation involving the misuse of his personal data to process a loan.
