The Nigeria Data Protection Commission NDPC has announced that data processing by licensees of the National Identity Management Commission NIMC will henceforth be scrutinized.
The Commission’s Head of Legal, Enforcement and Regulations, Babatunde Bamigboye who disclosed this in a statement, said only those that are cleared based on credible evidence of regulatory compliance will be permitted to carry out NIN verification going forward.
This follows an ongoing investigation of an incidence of unauthorized access to NIMC’s database by expressing.com, this led to NIMC restricting its licensed agents’ access to the NIN database
Bamigboye revealed that after a painstaking review, limited access has been granted to few agents that are providing pivotal public services such as education and security.
Noting that the incident is still under investigation, Bamigboye affirmed that series of intensive trainings will be conducted in order to ensure that personnel and licensees are abreast of the duty and standard of care mandated by the NDPAct, NIMC’s Privacy Policy and other relevant regulatory protocols.
The statement reads in part:
Following the reported incident of unauthorized NIN verification by expressverify.com, investigation reveals that a third-party who, among others, was originally authorized to provide verification services to citizens and genuine businesses might have allowed expressverify.com to use its NIN verification credentials to conduct verification.
The circumstances surrounding this permission is still under investigation.
to remedy this incident, National Identity Management Commission (NIMC), in line with established remediation protocols, barred all forms of access to its database.
Though necessary, barring all forms of access affected all genuine and crucial verification requests. After a painstaking review, limited access has been granted to few establishments that are providing pivotal public services such as education and security.
Ongoing investigation – by relevant agencies – seeks to establish the medium through which expressverify.com obtained the credentials of bona fide third parties and to determine the liability of persons involved in line with extant laws.
Furthermore, series of intensive trainings will be conducted in order to ensure that personnel and licensees are abreast of the duty of care and the standard of care mandated by the Nigeria Data Protection Act, NIMC’s Privacy Policy and other relevant regulatory protocols.
In the meantime, NDPC calls on members of the public to see NIN as an essential data for sustainable development.
While existing technical and organizational measures are being strengthened to ensure the protection of this data, it is important for citizens to ensure that they are not left unidentified in various frameworks for development.
It is equally important to be vigilant when sharing personal information on various online platforms.
