NDPC PROBES UNILAG, LOTUS BANK, HACKERBELLA OVER ALLEGED DATA BREACHES

The Nigeria Data Protection Commission (NDPC) has launched a forensic investigation into the University of Lagos (UNILAG), Lotus Bank and Hackerbella Ltd over alleged violations of Nigeria’s data protection laws.

The commission said the investigation followed public complaints alleging that students’ personal information was used to open bank accounts without a lawful basis.

In a statement signed by NDPC Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, the commission said its National Commissioner and Chief Executive Officer, Dr Vincent Olatunji, had directed investigators to conduct a comprehensive assessment of how the students’ data was collected, used and disclosed.

The investigation will also examine the roles and responsibilities of the three organisations and determine whether they complied with the Nigeria Data Protection Act, 2023.

According to the NDPC, investigators will assess issues including Data Protection Impact Assessments (DPIAs), the legality and transparency of credit scoring and profiling, automated decision-making, privacy notices, data-sharing arrangements and lawful bases for processing personal information.

The commission will also examine whether the organisations followed the principles of data minimisation, purpose limitation and appropriate data-retention policies, as well as whether adequate technical and organisational safeguards were put in place to protect students’ rights.

The NDPC said the investigation would assess the potential risks posed to the rights and freedoms of affected students.

The commission reminded educational institutions that handle personal information belonging to students, staff and other members of their communities that they have a heightened responsibility to ensure such data is processed lawfully, fairly, transparently and securely.

The NDPC also warned educational institutions that have yet to comply with its existing data protection directives to do so immediately.

The commission said the investigation is ongoing.