The National Commissioner of the Nigeria Data Protection Commission (NDPC), Dr. Vincent Olatunji, has issued an order for a comprehensive investigation into allegations of unauthorized access to the personal data of individuals enrolled in the National Identity Management Commission (NIMC) database. This move comes as a response to growing public concerns surrounding reports of illicit access to enrollees’ personal data by an entity known as XpressVerify.com.
It is worth noting that NDPC has previously been in discussions with NIMC regarding the enhancement of data protection measures. As part of these efforts, NDPC conducted a training session for relevant NIMC personnel in early February 2024. This initiative is just one of several ongoing efforts by the Federal Government to safeguard data privacy and protection.
NIMC has already launched an internal investigation and has pledged full cooperation with NDPC to thoroughly investigate the allegations and reassess the existing channels through which entities can lawfully verify the identity of enrollees on its platform. Additionally, NDPC will collaborate with relevant agencies to audit the activities related to the alleged unauthorized data processing and exploitation. Those found responsible for violating the Nigeria Data Protection Act of 2023 will be held accountable.
The National Commissioner has further mandated that preliminary findings from the investigation be disclosed to the public within seven days.
