The National Commissioner of the Nigeria Data Protection Commission (NDPC), Dr. Vincent Olatunji has initiated a comprehensive investigation into allegations of unauthorised access to the personal data of enrollees in the National Identity Management Commission (NIMC) database.
This move comes in response to public outcry over reports of illicit access to enrollees’ data by an entity known as XpressVerify.com.
The NDPC’s decision to investigate follows previous efforts to ensure data protection adequacy, including a training session conducted with NIMC officials in early February 2024. This reflects the government’s commitment to safeguarding data privacy.
NIMC has launched an internal investigation and has pledged full cooperation with the NDPC to uncover the truth behind the allegations. The focus is on reviewing existing verification processes to prevent future breaches.
The NDPC, in collaboration with relevant agencies, will audit the alleged unauthorized data processing and any associated monetisation activities. Those found guilty of violating the Nigeria Data Protection Act, 2023, will face legal consequences.
Head of legal, enforcement and regulations at the NDPC, Babatunde Bamigboye, Esq emphasised that preliminary findings of the investigation will be disclosed to the public within seven days. This transparent approach underscores the commitment to accountability and justice in addressing data privacy breaches.
