Dr. Vincent Olatunji, the National Commissioner of the Nigeria Data Protection Commission (NDPC), has initiated a comprehensive investigation into allegations of unauthorized access to the personal data of individuals enrolled in the National Identity Management Commission (NIMC) database.
This investigation represents a proactive regulatory response by the NDPC to address public concerns regarding reports of illicit access to enrollees’ personal data by an entity known as XpressVerify.com.
Prior to this, the NDPC had been actively collaborating with the NIMC on matters of data protection. In February 2024, the NDPC conducted a training session involving relevant personnel from the NIMC as part of its ongoing efforts in this regard.
“This is one of the measures being put in place by the Federal Government to ensure data privacy and protection.
“We note that NIMC has initiated internal investigation and it has immediately given full assurances of cooperation with NDPC to get to the root of the allegation and to review existing mediums through which any entity may lawfully verify the identity of enrollees on its platform.”
“Furthermore, NDPC will work with relevant agencies to audit the trails of the alleged unauthorized data processing and monetization of same, and those who are found culpable for violating the Nigeria Data Protection Act, 2023, will be brought to justice,” Olatunji said.
The national commissioner further directed that preliminary findings from the investigation would be made public within seven days.