Estate WhatsApp groups were meant to streamline communication, but they’ve also opened the door to privacy problems. Top of the list is the casual posting of children’s photos or videos by neighbours who assume it is harmless, neighbours taking photos or videos of children in common areas and circulating them in these groups without the parents’ consent.
For example, if an adult spots children misbehaving in the estate and doesn’t know their parents, posting their photos in the group may feel like a quick way to alert others. But is that legally acceptable? Should anyone post images of a neighbour’s children in a WhatsApp group without consent?
According to Mary Audi, an Associate Advocate at Muri Mwaniki Thige & Kageni LLP, this casual sharing is not as harmless as many imagine. “A child’s photo is personal data,” she says. “Posting it without the parent’s consent is unlawful, even if it’s in what people consider a private WhatsApp group.”
Even a residents’ WhatsApp group can constitute a large enough audience to damage a child’s reputation
Photo credit: Shuttersyock
Audi explains that under Kenya’s Data Protection Act (DPA), the act of posting or forwarding an image is treated as processing personal data. And even though a WhatsApp group feels intimate, it is still an online space where content can be saved, forwarded, screen-recorded or leaked beyond the intended audience. The law therefore places obligations on anyone handling such data — including ordinary residents.
Beyond the DPA, sharing images of minors without consent can breach Article 31 of the Constitution on the right to privacy, and may violate provisions of the Children Act, which protects children from being shamed, ridiculed or exposed to harm. The moment a child is framed as “misbehaving,” Audi notes, the legal risk deepens.
This is especially true where residents post a photo or video portraying a child negatively — perhaps climbing on cars, playing in prohibited areas, knocking over plants, or engaging in minor mischief. Audi says parents have clear grounds to object to the processing of such data and demand that the image be taken down. They can also lodge a complaint with the Office of the Data Protection Commissioner (ODPC).
But the implications don’t end at data protection. In some instances, sharing a child’s image in a way that embarrasses or humiliates them edges into harassment or cyberbullying. Kenya’s Computer Misuse and Cybercrimes Act criminalises cyber harassment, and penalties can reach up to 10 years in prison. “Even if someone thinks they’re doing the right thing for the estate,” Audi says, “that intention does not override the child’s rights.”
The idea that estate WhatsApp groups are “private” often gives residents a false sense of immunity. Legally, they’re not. If the group is used for administrative or quasi-official purposes — security updates, billing, community announcements — the estate or its management committee may be treated as a data controller. Admins may also be considered data processors. In simple terms, they have responsibilities too.
Audi points out that group administrators can be held liable if they allow unlawful content to remain online. They are expected to remove images that breach privacy laws, contain hate speech, or violate the Computer Misuse and Cybercrimes Act or the National Cohesion and Integration Act. “Continued acquiescence may expose the administrator to liability as a publisher or accessory,” she cautions.
There is also the issue of defamation. If a child is publicly or semi-publicly accused of wrongdoing in a closed estate group and the allegation is untrue, parents could have a viable defamation claim. Even a residents’ WhatsApp group can constitute a large enough audience to damage a child’s reputation. Because minors are involved, the courts tend to view such harm more seriously — often through the lens of the child’s long-term emotional and social well-being.
So what should people do instead of snapping photos and posting them online? Audi argues that the safer, lawful approach is to talk to the parents directly, or raise the matter through estate management or the owners’ association. If a safety concern must be documented, do so without sharing identifiable images of the child. “People need to understand that broadcasting a child’s face is not the solution,” she says.
For parents who discover that their child’s image has already been circulated, the first step is to request its immediate removal. Documentation, screenshots, timestamps, and information about who viewed the post — can be important if the matter escalates. They can exercise their rights under the DPA by issuing a takedown request to the person who posted the image, and if necessary, escalate the complaint to the ODPC. Where the sharing was malicious or humiliating, parents may explore criminal or civil remedies, depending on the harm caused.
Ultimately, the legal framework reflects a simple principle: Children deserve dignity. And in the age of hyper-connected neighbourhoods, estates must rethink how they raise concerns, how they communicate, and how they protect the youngest among them. As Audi puts it, “It is not just about the law, it is about respecting the child.”
