Nigeria’s data protection chief has ordered a full-scale investigation of the sister identity management agency of the Federal Government after a journalistic investigation revealed data privacy breaches.
Dr Vincent Olatunji, National Commissioner/CEO of National Identity Protection Commission (NDPC), who promised that preliminary findings of the probe will be made public within seven days has “ordered a full-scale investigation in respect of allegations of unauthorised access to the personal data of enrollees in the database of National Identity Management Commission (NIMC) in the wake of public concerns over reports of illegal access to personal data of enrollees by a shadowy entity called XpressVerify.com,” the data protection agency said in a statement seen by Technology Times.
The data protection agency said that it had hitherto engaged with NIMC on fostering what it calls “adequacy of data protection” that resulted in a training with relevant officers of the identity agency held in February 2024. “This is one in a continuum of measures being put in place by the Federal Government to ensure data privacy and protection.”
Dr Vincent Olatunji, National Commissioner/CEO of National Identity Protection Commission (NDPC), who promised that preliminary findings of the probe will be made public within seven days has “ordered a full-scale investigation in respect of allegations of unauthorised access to the personal data of enrollees in the database of National Identity Management Commission (NIMC) in the wake of public concerns over reports of illegal access to personal data of enrollees by a shadowy entity called XpressVerify.com,” the data protection agency said in a statement seen by Technology Times.
Data protection agency plans ‘audit trail’ probe
The NDPC noted that “NIMC has initiated internal investigation and it has immediately given full assurances of cooperation with NDPC to get to the root of the allegation and to review existing mediums through which any entity may lawfully verify the identity of enrollees on its platform.”
The data protection agency said it will work with relevant agencies to audit the trails “of the alleged unauthorised data processing and monetization of same and those who are found culpable for violating the Nigeria Data Protection Act, 2023 will be brought to justice.”
The NDPC probe comes just as NIMC has told Nigerians that their data is safe amid the investigations that revealed the alleged breach by XpressVerify.
NIMC is responsible for creating, owning, operating, maintaining, and managing the National Identity Database in Nigeria. The Commission which is reassuring Nigerians of the safety of their data after receiving the investigation revealed the data breach of citizens’ information by ‘XpressVerify’.
“The Commission wishes to state that it offers NIN verification and other services through licensed partners. XpressVerify is not one of the Commission’s licensed partners,” said in a statement.
The agency said that Engineer Abisoye Coker-Odusote, DG/CEO of NIMC has “ordered a comprehensive investigation into the matter to find out if any of the Commission’s Tokenization verification agents has in any way breached the licensing agreement either directly or through any of their sub-licensees.”
Odusote, affirms the commitment to data protection and privacy and assures every Nigerian of the safety and security of their enrollment.
“Top-level security is in place to protect the NIN and other personal data of every citizen and legal resident,” according to the NIMC CEO.
NIMC said that it expresses its gratitude to the media and whistle-blowers for alerting them to the rumours circulating regarding a possible data breach.
“NIMC would like to assure Nigerians and legal residents that their data is safe and secure in Nigeria’s National Identity Database, and that no breach of any kind has occurred,” the agency claimed.
Additionally, the Commission acknowledges the significance of preserving public faith and confidence in its operations and continues to uphold the highest standards of integrity and accountability.
Home
