The Nigeria Data Protection Commission (NDPC) has launched a forensic investigation into Lotus Bank, the University of Lagos (UNILAG) and Hackerbella Ltd over alleged violations involving the use of students’ personal information to create bank accounts without their consent.
The probe was triggered by complaints from affected students who accused the institutions of using their personal data without a lawful basis, according to a statement issued by the NDPC on Wednesday.
The Commission’s National Commissioner and Chief Executive Officer, Dr Vincent Olatunji, has ordered investigators to unravel how the data was collected, processed and shared, while determining the roles played by each organisation involved.
The NDPC team will also examine whether the parties complied with the Nigeria Data Protection Act, 2023, and assess possible risks to the privacy rights and freedoms of the affected students.
Among the issues under investigation are the legality of data processing, privacy notices, data-sharing agreements, credit scoring and profiling activities, automated decision-making systems, data retention practices, purpose limitation, and security measures put in place to protect students’ information.
The commission warned that institutions handling personal information belonging to students, staff and other members of their communities carry a greater responsibility to ensure such data is processed fairly, transparently and securely.
The NDPC further directed educational institutions yet to meet its data protection compliance requirements to immediately take steps to align with existing regulations.
Don’t Miss Out! Join our WhatsApp Channel for instant news updates. Click here to join
ALSO READ:
STERLING BANK N840M FRAUD! Ex-Staff Allegedly Moves Millions Through Fake Transactions
Zenith Bank: Big, Bold, and Built for Performance
