Identity theft: Court orders Bolt Holdings OU to pay GHC1.9 million compensation

An Adentan Circuit Court has awarded GHC1.9 million compensatory damages against Bolt Holdings OU, processor for Bolt Operations and owners of Bolt platform in Ghana in a civil suit. The Court further ordered Bolt Holdings OU, the first Defendant (DI) to pay cost of GHC20,000. The Court presided over by Mrs Sedinam Awo Kwadam dismissed plaintiffs claim against Bolt Ghana Limited, second defendant in the suit in its entirety. According to the Court, Bolt Ghana Limited was not the appropriate party to the suit. The judgement of the Court came after Justice Noah Adade, the plaintiff and a Lecturer at Kumasi Technical University, had gone to court over 'identity theft.' The Plaintiff, who is also a Board Chairman of the University, on August 1, 2022, ordered a bolt ride on his phone and found himself, his photo and details being the driver responding to pick him up. When the driver arrived, it was the plaintiff's own employee, Peter Walker who was driving the vehicle. Peter Walker confessed to stealing th e identity of the plaintiff and successfully registering himself as a driver on the Bolt App as driver in the year 2022. Engagements with Bolt Holdings OU also known as D2 did not yield any fruitful results by way of compensation for the plaintiff hence the suit. The Court in its judgement noted that the suit hinged on the processing of plaintiff's personal data which was undertaken by Bolt Holdings OU at the request of 'the identity thief.' According to the Court the processing was done by Bolt Holdings OU hence it was the appropriate party to the suit. It noted that D2 owed the Plaintiff 'Duty of Care' and reasonable Standard of the duty of care was founded in Section 20, 21, 28 and 30 of Act 843 of the Data Protection Act, to conduct a liveliness identity verification check as part of its own Digital Verification of Data subjects who purportedly requested by an application to become Bolt drivers on the Bolt platform. 'The failure of D2 to undertake the liveliness identity verification check as part of its digital identity verification check while processing the personal data of the purported applicant, amount to a breach of D2's duty of care owed to the Plaintiff herein.' It held that Plaintiff's personal data was not procured 'Directly' from him and thus was processed without his prior consent. According to the Court the plaintiff, seeing himself as a bolt driver operating over an uncertain period in the year 2022 caused him 'profound emotional distress.' 'Knowing an unknown number of Bolt ride users must have thought him to be a Bolt driver despite him being a co -founder and Chief Executive Officer of Glydetek Group, a financial Software Solutions provider for over 70 financial entities in Ghana and a Lecturer and Board Chairman at Kumasi Technical University, surely had Plaintiff emotionally distraught and traumatized.' Looking at reputation in his industry, the court held that, to be described as bolt driver, could be considered as 'downgrade' and dent on his reputation in the minds right thinking members of society especially in his community of businessmen and women. 'This Court recognizes this fact, with no prejudice to bolt drivers.' The Court held that it did not find any evidence to support the claim made by D2 that the plaintiff negligence contributed to his identity by Peter Walker. It said the plaintiff was not negligent in any way that might had caused his identity to have been stolen and used to register him unknowingly and without his prior consent as a driver on the bolt App. 'The Plaintiff did not abet his impersonation,' the court declared. In an over aching need to sanitize Bolt Holdings OU as well as other ride-hailing platform systems, the Court ordered the Data Protection Commission to ensure that Forensic audit of defendants' systems and a database is undertaken with D2 by conducting a liveliness identity verification check for all its drivers registered on the Bolt App or Platform up until March 2024 registrations. 'The Data Protection Commission shall ensure that other ride- hailing platforms in Ghana undergo this exercise as well, for the period they have not undertaken such verification process for the drivers who use their platforms, the Court ordered. Source: Ghana News Agency