The Nigeria Data Protection Commission (NDPC) has initiated a forensic inquiry into the University of Lagos (UNILAG), Lotus Bank, and Hackerbella Ltd following reports of potential data protection violations. Babatunde Bamigboye, the commission’s head of legal and enforcement, announced the investigation in Abuja on Wednesday. The move responds to complaints that students’ personal information was utilized to open bank accounts without proper authorization.
Dr. Vincent Olatunji, the National Commissioner of the NDPC, has mandated a thorough evaluation of how the students’ data was gathered and shared. The investigative team will clarify the specific roles of each entity and evaluate their adherence to the 2023 Nigeria Data Protection Act. The probe will examine several critical factors, including the necessity of Data Protection Impact Assessments, the validity of credit scoring methods, and the security of internal data-sharing protocols.
Bamigboye reminded educational institutions that they bear a significant duty to handle sensitive data with transparency and security. He urged all learning centers to prioritize full compliance with national directives to protect the rights of their students and staff, noting that robust data governance is vital for the education sector.
