FG: We’re investigating alleged data breaches in banking, telecoms, gaming sectors

The Nigeria Data Protection Bureau (NDPB) says it is investigating cases of alleged violations in the digital space.

Vincent Olatunji, NDPB’s chief executive officer (CEO), said this on Thursday in Abuja while speaking on the bureau’s achievements.

He said the investigations were necessary as adequate data protection goes beyond display of privacy policies and filing of compliance audit returns with the bureau. 

“We cannot over-emphasise the importance of compliance due to the vulnerabilities in the digital space,” Olatunji said.

“We are currently carrying out full-scale investigations of alleged violations in the telecom, banking and gaming sectors and we can report that appropriate remedial actions have been initiated.

“We are currently working with the police investigation unit at the bureau to ensure prompt action in some cases involving shadowy data controllers.

“As much as we rely on non-criminal processes in redressing breaches of data privacy and protection, it will be sorely wrong for any data controller or data processor to test the resolve of government in bringing wilful violators to justice.”

He said the bureau was working on guidelines to ensure total and effective data protection of Nigerians as millions are exposed on the internet owing to exchange of information for essential services.

“For instance, in the health and gaming sectors, we are working on sectorial guidelines. Approximately 90 percent of our population may have various degrees of sensitive personal data being processed in the health sector. Over 60 million youths are sharing personal data in the gaming industry,” he said. 

“You will agree, therefore, that the advent of automated data processing, which could have significant impact on the enjoyment of private lives, has made data protection imperative.”

The bureau’s national commissioner added that since the inception of the NPDB in February 2022, the organisation has created over 8,000 jobs and raked in a revenue of over N4 billion.

Speaking further, he said the NPDB’s data protection office has registered 103 data protection compliance organisations (DPCOs).

“Currently, we have opened our portal for registration of more DPCOs. This is due to the increase in demand for data protection compliance services. Our target number is 150 DPCOs,” Olatunji said.

He also said Nigeria’s advancement in the global digital economy is reflected in the country being added to the common thread network (a network of data protection authorities of Commonwealth countries).

“The country is now a full member of the Network of African Data Protection Authorities (NADPA) and currently holds the position of the vice-chair, Africa Union’s Policy and Regulatory Initiative for Digital Africa (PRIDA),” he said.