Ngunjiri v Kiambi & another (Petition E225 of 2023) [2025] KEHC 3793 (KLR) (Constitutional and Human Rights) (27 March 2025) (Judgment)

Kenya Law

Automated Summary

Key Facts

The petitioner alleges that the first respondent installed a CCTV camera directly facing his house at Faith Apartments in Ngumba Estate without consent, capturing his main door, living room, and common areas. The second respondent (landlord) failed to address the petitioner's complaints and issued an eviction notice in June 2023. The camera's 30-meter range and 45-degree coverage, along with its capacity to store 365 days of footage, are central to the privacy violation claim under Article 31 of the Constitution.

Issues

  • Whether the 1st respondent's installation of a CCTV camera directly facing the petitioner's house without consent or disclosure violated the petitioner's right to privacy under Article 31(c) of the Constitution, particularly concerning unauthorized data collection and storage.
  • The High Court's authority to adjudicate on the petitioner's constitutional claims regarding privacy and the respondents' arguments about exhausting alternative dispute resolution mechanisms under the Data Protection Act.
  • Determining if the petitioner is entitled to injunctive orders against the 1st respondent, destruction of collected data, and compensation for constitutional rights violations, including Article 31(c) (right to privacy) and Article 39 (security of person).

Holdings

The court held that the petitioner failed to exhaust the Data Commissioner's process, thus the High Court lacked jurisdiction to hear the petition. The petition was struck out, and each party bore its own costs.

Legal Principles

  • The court applied the doctrine of exhaustion of remedies, requiring parties to exhaust alternative dispute resolution mechanisms (Data Protection Commissioner process) before seeking judicial intervention. This principle was central to the court's determination that the petition was premature.
  • The court asserted its jurisdiction under Article 165(3)(b) and Article 23(1) of the Constitution to determine constitutional petitions involving rights violations. This included evaluating whether the High Court could directly adjudicate privacy claims under the Data Protection Act.
  • The right to privacy under Article 31(c) of the Constitution was interpreted as encompassing control over personal information and protection from unwanted surveillance. The court emphasized balancing privacy rights with legitimate security interests, though found the petitioner's rights were violated in this case.

Precedent Name

  • Koinange vs. Commission of Inquiry into The Goldenberg Affair
  • Peter Mauki Kaijenga & 9 others vs Chief of the Defence Forces & another
  • Okello Okello John Livingstone and 6 others v The Attorney General & another
  • Makoffu v Kenya Power and Lighting Company Limited
  • Gitobu Imanyara & 2 others v Attorney General
  • Jasbir Singh Rai & 3 Others vs. Tarlochan Singh Rai & 4 Others
  • Rift Valley Sports Club vs. Patrick Tames Ocholla
  • R vs Peterkin ex parte Soni
  • Ndiara Enterprises limited vs. Nairobi City County Government
  • Kenya Human Rights Commission v Commissions of Authority of Kenya and 4 others
  • LawSociety of Kenya v Supreme Court of Kenya & another; Abdulahi SC & 19 others
  • Ondieki v Maeda
  • Evelyn College of Design Vs AG and another
  • Robert Mwangi Mugo v OCS Nvahururu Police Station & 2 others

Cited Statute

  • Data Protection Act, 2019
  • Constitution of Kenya, 2010
  • Fair Administrative Action Act

Judge Name

L N Mugambi

Passage Text

  • It is the finding of this Court that the instant petition offends the doctrine of exhaustion of remedies. For this reason, the petition is hereby struck out.
  • The existence of the doctrine is not in question. What is in question is whether it is applicable in the case at hand...
  • It is clear from the examination of the above statutory provisions that the grievance by the Petitioner is matter that involves data violation and thus any complaint relating to breach of privacy by unlawful collection of personal data ought to have been lodged with the Data Commissioner...