The Office of the Data Protection Commissioner of Kenya found a local school liable for multiple data protection violations after the school published photographs and videos of minor pupils on TikTok and Facebook for marketing purposes without obtaining parental consent. The regulator initiated an investigation after a parent filed a complaint regarding the school’s stated intention to post student videos on social media despite objections from guardians. As a result of the investigation, the regulator issued an Enforcement Notice against the school.