KCB Senior Manager Rosemary Koech Kimwatu Dies over Workplace Harassment

Toxic Bank: The death of Rosemary Koech-Kimwatu, Head of Data Protection at KCB Bank Group, has sent shockwaves through Kenya’s banking, technology and data-protection communities, amid emerging allegations concerning the workplace environment she experienced before her death.

Koech-Kimwatu died at her home in Ngong on Friday, August 21, 2026. Her death has prompted an outpouring of tributes from colleagues and organisations with which she worked during a distinguished career spanning law, technology, public policy and data governance.

However, questions are now emerging over claims that the senior executive had allegedly experienced sustained workplace harassment and pressure from a supervisor before her death.

One online report published following her death says that people described as former colleagues and industry peers had linked her distress to treatment at work, including alleged excessive workloads, criticism and belittlement.

She died by suicide.

This raises serious questions that may warrant clarification and investigation, particularly given growing concern about workplace bullying, psychological safety and the responsibility of employers to protect employees from harassment.

A Respected Data Protection Leader

At the time of her death, Koech-Kimwatu was one of Kenya’s prominent voices on privacy, technology law and responsible data governance.

She joined KCB Bank Group in June 2022 as Data Protection Officer after previously serving as Public Policy Manager at Safaricom PLC. She was promoted to Head of Data Protection in June 2023, taking responsibility for data-protection compliance and governance across the banking group.

Her influence extended far beyond KCB.

The Kenya ICT Action Network (KICTANet), where she served as a board trustee, mourned her as an important figure in the advancement of technology policy, internet governance and digital rights.

She had also served as Principal of the Kenya School of Internet Governance and chaired multistakeholder advisory groups associated with the Kenya and East Africa Internet Governance Forums.

The Office of the Data Protection Commissioner (ODPC) similarly paid tribute to Koech-Kimwatu, describing her as a respected voice in promoting responsible use of personal information and strengthening Kenya’s privacy culture.

The Data Privacy and Governance Society of Kenya also remembered her as its founding and first vice president, crediting her with helping build Kenya’s growing community of privacy professionals.

Questions That Should Be Answered

The emergence of allegations concerning Koech-Kimwatu’s workplace experiences means speculation should not be allowed to substitute for evidence.

Any claims of harassment should be investigated fairly, with those making the allegations encouraged to provide evidence to the appropriate authorities or investigators.

Among the questions requiring clarification are whether Koech-Kimwatu ever formally complained about her working environment, whether management or human resources officials received concerns regarding her treatment, and, if complaints existed, what action was taken.

Those questions matter not only because of the senior position Koech-Kimwatu held but because employers have a responsibility to provide professional environments in which workers can raise grievances without fear of retaliation.

At the same time, it would be unfair to attribute responsibility for her death to an individual without evidence and a proper investigation.

Her family has asked the public to remember her children and loved ones as they mourn her loss.

As tributes continue to pour in, Koech-Kimwatu will be remembered as a lawyer, technology policy specialist and privacy advocate whose work helped shape Kenya’s rapidly developing data-protection landscape.

Her death is a profound loss to that community.