NDPC to investigate alleged NIMC’s unauthorised access to enrollees’ personal data

The Nigeria Data Protection Commission, NDPC, has said it will investigate the alleged unauthorised access to the personal data of enrollees by the National Identity Management Commission, NIMC.

Dr Vincent Olatunji, National Commissioner of NDPC gave the hint in a statement on Sunday.

“This investigation is a further regulatory measure to be taken by NDPC in the wake of public concerns over reports of illegal access to personal data of enrollees by a shadowy entity called XpressVerify.com,” Olatunji said.

He recalled that the NDPC had been engaging with NIMC on fostering adequacy of data protection and consequently had a workshop in February.

According to him, this is one in a continuum of measures being put in place by the Federal Government to ensure data privacy and protection.

“We note that NIMC has initiated an internal investigation and it has immediately given full assurance of cooperation with NDPC.

“NDPC will get to the root of the allegation and review existing mediums through which any entity may lawfully verify the identity of enrollees on its platform.

“Furthermore, NDPC will work with relevant agencies to audit the trails of the alleged unauthorised data processing and monetisation of same,” he said.

Olatunji noted that those who were found culpable for violating the Nigeria Data Protection Act, 2023, would be brought to justice.

The National commissioner further directed that preliminary findings of the investigation should be made public within seven days.