NDPC PROBES UNILAG, LOTUS BANK OVER DATA BREACHES
Read Time:1 Minute, 41 Second
HOTJIST NEWS
The Nigeria Data Protection Commission has started a detailed investigation into the University of Lagos, Lotus Bank, and Hackerbella Ltd because of suspected breaches of data protection rules.
This was announced in a statement signed on Tuesday by Babatunde Bamigboye, the Head of Legal, Enforcement, and Regulations at the commission, and shared on the commission‘s X account on Wednesday.
The statement said, “The Nigeria Data Protection Commission (NDPC) has begun a forensic investigation into the University of Lagos (UNILAG), Lotus Bank, and Hackerbella Ltd after receiving public complaints about the use of students‘ personal data to open bank accounts without proper legal grounds.”
Dr Vincent Olatunji, the National Commissioner and Chief Executive Officer of the commission, told the investigation team to thoroughly examine the situation regarding how the affected students‘ personal data was collected, used, and shared.
The team will also examine the roles and responsibilities of the parties involved, as well as their compliance with the Nigeria Data Protection Act, 2023.
The commission said, “The investigation will look into several things, including Data Protection Impact Assessments (DPIAs), whether credit scoring or profiling is done properly and openly, how automated decision–making systems are used, if privacy notices are clear enough, how data is shared, the legal reasons for processing data, whether only necessary data is collected, if data is used only for specific purposes, how long data is kept, and if there are proper measures to protect the rights of individuals.”
It also mentioned that the investigation will check the possible risks these actions might have on the rights and freedoms of the students involved.
The NDPC reiterated that institutions entrusted with students’, staff members’ and other members of their communities’ personal data have a heightened responsibility to ensure that such data is processed lawfully, fairly, transparently and securely.
“Accordingly, the NDPC warns educational institutions that are yet to comply with its existing data protection compliance directives to do so immediately,” the commission said.
The commission said the investigation was ongoing.
Happy
0 %
Sad
0 %
Excited
0 %
Sleepy
0 %
Angry
0 %
Surprise
0 %
0
0