The Nigeria Data Protection Commission (NDPC) has commenced a forensic investigation into the University of Lagos (UNILAG), Lotus Bank and Hackerbella Ltd over alleged violations of data protection laws.
The investigation follows complaints alleging that students’ personal data were used to open bank accounts without a lawful basis.
Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at the NDPC, disclosed this in a statement on Wednesday in Abuja.
Bamigboye said the commission’s National Commissioner, Vincent Olatunji, directed the investigation team to conduct a comprehensive assessment of how the affected students’ data were collected, used and disclosed.
He said the probe would also establish the respective roles and responsibilities of UNILAG, Lotus Bank and Hackerbella in the alleged processing of the data.
According to him, the investigation will assess the parties’ compliance with obligations under the Nigeria Data Protection Act, 2023.
“The investigation will, among others, cover Data Protection Impact Assessments (DPIAs), the lawfulness and transparency of any credit scoring or profiling activities, and the use of automated decision-making systems,” Bamigboye said.
He added that the commission would examine the adequacy of privacy notices, data-sharing arrangements, lawful bases for processing, data minimisation, purpose limitation, retention policies and technical and organisational safeguards protecting data subjects’ rights.
Bamigboye said the investigation would also assess potential risks to the rights and freedoms of the affected students.
He stressed that institutions entrusted with the personal data of students, staff and other members of their communities must ensure that such information is processed lawfully, fairly, transparently and securely.
The NDPC official further urged educational institutions that had yet to comply with the commission’s existing data protection directives to do so.
He said compliance with data protection regulations was essential to safeguarding data subjects’ rights and freedoms while promoting responsible data governance across the education sector.
Boluwatife Enome
