NDPC Investigates Alleged Privacy Breach at NIMC

The National Commissioner of the Nigeria Data Protection Commission (NDPC), Dr. Vincent Olatunji, has ordered a full-scale investigation into allegations of unauthorized access to the personal data of enrollees in the National Identity Management Commission’s (NIMC) database.

This investigation follows public concerns over reports of illegal access to personal data by a company called XpressVerify.com.

In response to the allegations, NDPC has been engaging with NIMC on data protection measures.

In February 2024, the Commission held a training with relevant officers of NIMC to ensure data privacy and protection.

NIMC has initiated an internal investigation and has assured full cooperation with NDPC in getting to the root of the allegations and reviewing the existing mediums through which any entity may lawfully verify the identity of enrollees on its platform.

NDPC will work with relevant agencies to audit the trails of the alleged unauthorized data processing and monetization of personal data, and those found culpable for violating the Nigeria Data Protection Act, 2023, will be brought to justice. Preliminary findings from the investigation will be made public within seven days.

The NDPC’s swift action in addressing the alleged privacy breach at NIMC demonstrates its commitment to protecting the personal data of Nigerian citizens and ensuring that organizations handling this data comply with the Nigeria Data Protection Act.

This incident serves as a reminder to organizations handling personal data to prioritize data protection and privacy, as well as the importance of adhering to data protection regulations to avoid potential legal consequences.

The outcome of the investigation and subsequent actions taken by the NDPC will set an important precedent for data protection and privacy in Nigeria, emphasizing the need for accountability and transparency in handling personal data.