The National Data Protection Commission (NDPC) has initiated a thorough investigation into the data practices of Optasia, a company operating in Nigeria under Nairtime Nigeria Ltd. This action follows concerns raised by NDPC’s routine oversight of major data controllers and processors, which revealed potential breaches in data compliance.
Dr. Vincent Olatunji, the National Commissioner and CEO of the NDPC, expressed serious concern over the use of intrusive technologies by Optasia in processing personal data for marketing, credit scoring, and other financial solutions. Such activities, according to the NDPC, may violate the privacy rights of Nigerian citizens.
The scope of the investigation will extend to how various financial institutions, telecom companies, and insurance providers use citizens’ personal data for credit scoring and other purposes. The Commission is determined to ensure that all personal data processing complies with Nigeria’s data protection laws.
Dr. Olatunji emphasized the need for all data controllers and processors, especially those working with third-party providers, to ensure that their partners are registered with the Commission. This requirement aims to enhance accountability, protect personal data, and safeguard Nigeria’s data sovereignty.
