NDPC investigates alleged breach of data privacy at NIMC

…Promises to safeguard personal information

By Blessing Chidinma, Abuja

The Nigeria Data Protection Commission (NDPC) has launched an investigation into allegations of unauthorised access to the personal data of enrollees in the database of the National Identity Management Commission (NIMC).

The investigation, spearheaded by the National Commissioner, Dr. Vincent Olatunji, is in response to public concerns surrounding reports of illegal access of personal data by an entity known as XpressVerify.com.

Dr. Olatunji has ordered this investigation as part of NDPC’s regulatory measures to address the alleged privacy breach. The NDPC has been actively engaging with NIMC to ensure data protection adequacy, including conducting training sessions with NIMC officers in early February 2024.

NIMC has already initiated an internal investigation and has pledged full cooperation with NDPC to uncover the truth behind the allegations. NIMC also aims to review its existing protocols for verifying the identity of enrollees on its platform.

In addition to NIMC’s internal investigation, NDPC plans to collaborate with relevant agencies to audit the trails of the alleged unauthorized data processing and any monetization of the data. Those found guilty of violating the Nigeria Data Protection Act, 2023, will face legal consequences.

Head of Legal, Enforcement, and Regulations, NDPC, BabatundeBamigboye, Esq. CDPRP stated that preliminary findings of the investigation will be made public within seven days.

This move underscores the commitment of NDPC and NIMC to transparency and accountability in protecting the privacy of Nigerian citizens’ personal data.

The NDPC and NIMC urge the public to remain vigilant and report any suspicious activities related to the handling of personal data. They also assure the public that all necessary measures will be taken to safeguard personal information and hold perpetrators accountable.