ALLEGED DATA BREACH: NDPC INVESTIGATES CORPORATE AFFAIRS COMMISSION

By:Tajudeen Aminat
The Nigeria Data Protection Commission, NDPC, has initiated an investigation into the reported data breach at the Corporate Affairs Commission, CAC.
This investigation, which is in pursuant to Section 46(3) of the Nigeria Data Protection Act, 2023 (NDP Act), underscores the importance of fostering trust in Nigeria’s economic environment, according to the agency.
The NDPC noted with concern that threat actors in the digital space have devised malicious methods of compromising the data security architecture of key databases.
It said these attacks involve large-scale data exfiltration and cross-platform compromises across interconnected systems.
As part of ongoing regulatory support measures, a statement signed by Babatunde Bamigboye, Esq., Head of Legal, Enforcement and Regulations at the NDPC, disclosed that the National Commissioner, Dr. Vincent Olutunji, has directed the Commission’s technical team to immediately engage relevant authorities and key organisations to strengthen existing safeguards for personal data processing.
According to the statement, the investigation will, among other things, examine access control mechanisms, data privacy impact assessments, vulnerability assessment and penetration testing (VAPT), as well as due diligence on third-party data processors.
The NDPC assured the public that Nigeria’s data protection framework, including technological and institutional safeguards, remains robust, noting that this is reflected in the growing adoption of data-driven services across the country.
