NDPC Launches Investigation Into Alleged Privacy Breach At NIMC

The National Data Protection Commission (NDPC) has recently launched an investigation into an alleged privacy breach at the National Identity Management Commission (NIMC).

The investigation was launched due to reports of a potential privacy breach at the NIMC, by a shadowy third-party organisation, XpressVerify.

It is alleged that sensitive personal information, including biometric data, of individuals registered with the NIMC may have been compromised.

Although the NIMC denied collaborating with XpressVerify, the NDPC takes such allegations seriously and has initiated an investigation to determine the veracity of the claims. The commission aims to ensure that the privacy and security of citizens’ personal data are upheld and protected.

In a Press Release signed by Babatunde Bamigboye, Esq. CDPRP Head of Legal, Enforcement and Regulations, the NDPC announced its intentions to commence investigations.

“The National Commissioner, Nigeria Data Protection Commission (NDPC), Dr Vincent Olatunji, has ordered a full-scale investigation in respect of allegations of unauthorized access to the personal data of enrollees in the database of National Identity Management Commission (NIMC).

“This investigation is a further regulatory measure to be taken by NDPC in the wake of public concerns over reports of illegal access to personal data of enrollees by a shadowy entity called XpressVerify.conn.

“It will be recalled that prior to now, NDPC has been engaging with NIMC on fostering adequacy of data protection. To this end, NDPC held a training with relevant officers of NIMC early February, 2024. This is one in a continuum of measures being put in place by the Federal Government to ensure data privacy and protection.

“We note that NIMC has initiated internal investigation and it has immediately given full assurances of cooperation with NDPC to get to the root of the allegation and to review existing mediums through which any entity may lawfully verify the identity of enrollees on its platform.

“Furthermore, NDPC will work with relevant agencies to audit the trails of the alleged unauthorized data processing and monetization of same, and those who are found culpable for violating the Nigeria Data Protection Act, 2023 will be brought to justice.

“The National Commissioner further directed that preliminary findings of the investigation should be made public within seven days,” the statement read.

Geeky Nigeria reports that The National Data Protection Commission is tasked with overseeing the protection of personal data in Nigeria. It ensures that organizations, both public and private, comply with data protection regulations and safeguards individuals’ privacy rights.

As part of its mandate, the NDPC investigates alleged breaches of data privacy and takes appropriate actions to rectify any violations. In this case, the commission has launched an investigation into the alleged privacy breach at the NIMC to ascertain the facts and determine the necessary steps to address the situation.