The Nigeria Data Protection Commission (NDPC) has announced plans to investigate allegations of unauthorized access to the personal data of enrollees by the National Identity Management Commission (NIMC). This move comes in response to public concerns over reports of illegal access to personal data by an entity known as XpressVerify.com.
Dr. Vincent Olatunji, National Commissioner of NDPC, revealed the decision in a statement issued in Abuja on Sunday. Signed by Mr. Babatunde Bamigboye, Head of Legal, Enforcement, and Regulations at NDPC, the statement outlined the commission’s intention to conduct a thorough investigation into the matter.
Olatunji emphasized that the investigation is a regulatory measure aimed at addressing the reported breach of data privacy. He highlighted the NDPC’s previous engagements with NIMC to enhance data protection adequacy, including a workshop held in February.
The NDPC aims to review existing protocols for verifying the identity of enrollees on NIMC’s platform and will collaborate with relevant agencies to audit alleged unauthorized data processing and monetization.
The statement affirmed NDPC’s commitment to upholding the Nigeria Data Protection Act of 2023 and ensuring accountability for any violations. Olatunji warned that those found guilty of breaching data protection laws would face legal consequences.
In a directive issued by the National Commissioner, preliminary findings of the investigation are expected to be made public within seven days, underscoring the commission’s transparency and commitment to addressing the issue promptly.