Loading officer dashboard…
Loading officer dashboard…
Loading officer dashboard…
ODPC DPA 2019 evidence for who accessed personal data, what category was viewed, when, why, and under which lawful basis.
Logged with purpose and lawful basis
1 involved unauthorised access
21-day SLA under DPA s47
Escalated to DPO queue
| Accessor | Data-subject | Data-category | Purpose | Lawful-basis | Timestamp | Retention-period |
|---|---|---|---|---|---|---|
| Faith Njeri | BRW-****-2017 | CRB | Credit assessment and bureau obligation check | Consent and contract performance | 2026-07-11T08:18:39+03:00 | 7 years after facility closure |
| api-key:mpesa-statements | BRW-****-1984 | M-Pesa-statements | Cashflow verification for affordability | Explicit consent | 2026-07-11T09:35:44+03:00 | 24 months after assessment |
| Grace Wambui | BRW-****-2040 | identity | KYC refresh and duplicate identity check | Legal obligation | 2026-07-11T10:03:28+03:00 | 7 years after customer exit |
| system | BRW-****-2066 | biometric | Liveness match for account recovery | Explicit consent and fraud prevention | 2026-07-11T10:22:59+03:00 | 90 days unless disputed |
| Brian Otieno | BRW-****-2051 | financial | Restructure affordability review | Contract performance | 2026-07-11T10:41:10+03:00 | 7 years after facility closure |
| Incident | Data category | Detected at | ODPC filed at | Affected subjects | Status |
|---|---|---|---|---|---|
| Denied examiner session attempted borrower CRB export without approved scope | CRB | 2026-07-11T08:47:03+03:00 | 2026-07-11T11:20:00+03:00 | 0 | filed within 72h |
| Legacy support role retained M-Pesa statement view permission after transfer | M-Pesa-statements | 2026-07-09T14:15:00+03:00 | 2026-07-10T09:05:00+03:00 | 3 | filed within 72h |
| Request type | Data-subject | Received | Due | Owner | Status |
|---|---|---|---|---|---|
| right to access | BRW-****-1782 | 2026-07-02 | 2026-07-23 | Data protection officer | on track |
| right to correction | BRW-****-1844 | 2026-06-24 | 2026-07-15 | Credit operations | due soon |
| right to erasure | BRW-****-0991 | 2026-06-13 | 2026-07-04 | Data protection officer | overdue |
| right to access | BRW-****-1538 | 2026-06-18 | 2026-07-09 | Customer outcomes | completed |