The National Commissioner, Nigeria Data Protection Commission, NDPC, Dr Vincent Olatunji, has ordered a full-scale investigation in respect of allegations of unauthorized access to the personal data of enrollees in the database of the National Identity Management Commission, NIMC.
This investigation followed a report by FIJ that XpressVerify.com is running a service that enables people to check the National Identification Number, NIN for a token on their website indiscriminately.
National Identity Management Commission (NIMC) had in an earlier statement indicated that it does have not any form of third-party agreement for verification of NIN with XpressVerify.com.
NIMC also said it has begun an investigation into alleged unauthorized access to the NIN data by XpressVerify.com
Olatunji in a statement said NDPC will get to the root of the allegation and review existing mediums through which any entity may lawfully verify the identity of enrollees on its platform.
“This is one of the measures being put in place by the Federal Government to ensure data privacy and protection.
“We note that NIMC has initiated internal investigation and it has immediately given full assurances of cooperation with NDPC to get to the root of the allegation and to review existing mediums through which any entity may lawfully verify the identity of enrollees on its platform.
“Furthermore, NDPC will work with relevant agencies to audit the trails of the alleged unauthorized data processing and monetization of same, and those who are found culpable for violating the Nigeria Data Protection Act, 2023, will be brought to justice,” Olatunji said.
The national commissioner further directed that preliminary findings from the investigation would be made public within seven days.
