The Nigeria Data Protection Bureau (the Bureau) has launched an inquiry into accusations of data privacy violations involving two major Nigerian data controllers, Wema Bank PLC and KC Gaming Networks (Bet9ja). This is in accordance with Section 37 of the 1999 Constitution and the terms of the Nigeria Data Protection Regulation (NDPR) 2019, namely Articles 2.1(2)-(3), 2.6, and 4.
It will be recalled that sometime in May 2022, some customers of Wema Bank PLC complained of a breach of their rights to data privacy and protection by the Bank. This data processing, according to the complaints against the Bank, involves using their personal data to open accounts. The Bureau is also investigating report of breach of data privacy at KC Gaming Networks. The breach, in this case, involved the alleged external attack on the KC Gaming Networks.
“At this stage, the objectives of these investigations as directed by the National Commissioner/CEO of the Bureau, Dr Vincent Olatunji, are to determine the impact of the breaches on the affected data subjects and the remedial actions taken by the concerned data controllers. The Bureau assures members of the general public that it will ensure proper accountability of the data controllers in the ongoing investigations”, Bamigboye noted.
