TECHDIGEST– The Nigeria Data Protection Act 2023 was signed into Law by His Excellency, President Bola Ahmed Tinubu, GCFR on the 12th of June 2023.  The Law effectively positions Nigeria to take its pride of place in the comity of nations in the very important aspect of data protection and data privacy.

The Nigeria Data Protection Regulation, 2019

In this article, I will discuss the timeline and catalogue the series of events that have led to the signing of the Data Protection Bill.    The first landmark event took place on the 25th of January 2019 when, as the Director-General and Chief Executive Officer (CEO) of the National Information Technology Development Agency (NITDA), I signed the Nigeria Data Protection Regulation (NDPR).  This was a subsidiary legislation that derived its powers from the NITDA Act 2007, with specific reference to Section 6.

Prior to the signing of the NDPR 2019, Nigeria had no policy instrument that focused on supporting data privacy and data protection in the country.  Issues bordering around data protection were marginally mentioned in Section 37 of the 1999 Constitution, as amended which says “The privacy of citizens, their homes, correspondences, telephone conversations and telegraphic communications are hereby guaranteed and protected.” It was also briefly mentioned in the laws of the National Identity Management Commission (NIMC), National Human Rights Commission (NHRC) and a few others, but none had data protection as its primary focus.

On assumption of office as the CEO of NITDA in October 2016, I realised that there was a huge gap in the area of data protection.  This, as well as my strong interest in datafication and my conviction that it would serve as a catalyst for Nigeria’s effective participation in the Fourth Industrial Revolution, (4IR} informed my decision to lay a strong emphasis on Information Technology Law at NITDA, as well as partner with leading universities in Nigeria to establish a course on Information Technology Law.  This approach enabled us to develop the requisite capacity for developing our indigenous version of the European Union’s General Data Protection Regulation (GDPR) and a number of African countries eventually partnered with us to study and adapt the NDPR in their countries.

In just 2 years of the implementation of the NDPR, a novel sub-sector of the economy was created, Seven Thousand Six Hundred and Eighty (7,680) Nigerians were employed. Nigeria was appointed as the Vice Chair of the Data Protection Laws Harmonization Working Group at the African Union (AU)and was the only country in Africa to publish a data protection report in two years.

Establishment of the Nigeria Data Protection Parastatals

To further consolidate the gains made through the NDPR 2019, I sent a memo to the former President, His Excellency President Muhammadu Buhari, GCFR, on the 13th of January 2022 citing “an urgent need to establish an institution as a government that will focus on data protection and privacy for the country.  An independent Authority is a pre-requisite for international acceptance of Nigeria’s data protection law. The Adequacy referential of the European Union’s Article 29 Working Party; Convention 108 on the Automatic Processing of Personal Information; the European Union General Data Protection Regulation (EU-GDPR) and Association of Southeast Asian Nations (ASEAN) all prescribe this standard.”

The institution would be an offshoot of NITDA, the Agency that developed and was implementing the NDPR 2019 at the time. Furthermore, I recommended that Dr Vincent Olatunji, the then Director, eGovernment Development and Regulations Department and Chairman of the Nigeria Data Protection Regulation (NDPR) Implementation Committee at NITDA, serve as the  pioneer National Commissioner/CEO of the new institution.  The proposed institution was to be called the Nigeria Data Protection Bureau (NDPB).  The prayers in that memo were approved and President Muhhamadu Buhari appointed Dr Vincent Olatunji as the CEO of the NDPB for an initial term of five (5) years.

The NDPB started operations immediately, on the 4th of February 2022.  Part of the remit of the NDPB included the mandate to galvanise all stakeholders for the drafting of a National Data Protection Bill that will ultimately transform the National Data Protection Bureau into the National Data Protection Commission (NDPC). Section 7 of the Nigeria Data Protection Act 2023, makes the Commission independent whilst section 64 makes the Commission the successor of the NDPB. Thus by virtue of section 64, NDPB automatically becomes NDPC.

Presentation of the Nigeria Data Protection Bill to the Federal Executive Council ( FEC)

As part of the process of ensuring that Nigeria has a principal legislation for enabling data protection and privacy, a draft data protection bill was developed after several stakeholder engagements, comprising institutions and individuals in both the public and private sectors.  I presented the draft bill at the Federal Executive Council (FEC) on the 25th of January, 2023.  After a very robust discussion at the Council and a few amendments, the draft bill was approved.  Three (3) Senior Advocates of Nigeria, who were also members of the Federal Executive Council, made contributions that significantly enhanced the draft bill and most importantly, converted the Bureau’s status to a commission.

Transmission of the Enhanced and Approved Bill to the National Assembly

Following the approval of the draft bill, the Council mandated me to liaise with the Attorney-General of the Federation and the Honourable Minister of Justice to forward the bill to the National Assembly as an Executive Bill for passage in both chambers of the National Assembly.  Following the transmission of the bill to the National Assembly, I also had several engagements with the National Assembly to promote the bill and give clarity where required.

Approval by Both Chambers of the National Assembly

The draft bill was independently reviewed by both the Senate and the House of Representatives, after the letter of transmission of the Executive Bill from the President was read in both Chambers on the 4th of April, 2023.  After comprehensive deliberations in both Chambers, the Senate passed the Bill on the 3rd of May 2023 and the House passed it on the 23rd of May 2023.

Signing into Law by President Bola Ahmed Tinubu

His Excellency, President Bola Ahmed Tinubu GCFR assented to the harmonised bill on the 12th of June 2023.  The fact that the journey between the transmission of the Executive Bill to the National Assembly and the signing into law by Mr. President took just 70 days is a testament to the fact that the Bill was given the pride of place that it deserves in our digital economy journey as a country.

The signing of the Nigeria Data Protection Act 2023, along with the Nigeria Startup Act 2022, both of which I had the unique privilege of midwifing, are very critical and have created a very good foundation for the development of a robust digital economy and a sustainable knowledge-based economy.  I would like to extend my hearty commendations to President Bola Ahmed Tinubu GCFR and former President Muhammadu Buhari GCFR for their invaluable support towards the signing of the Nigeria Data Protection Act 2023. I am confident that these laws will accelerate the digitalization of the different sectors of the Nigerian economy and history will be kind to all those that played a role in the process.

Professor Isa Ali Ibrahim (Pantami) CON, former Minister of Communication and Digital Economy is a Professor of Cybersecurity, the Federal University of Technology Owerri, Imo State
July 3, 2023

The post The Journey Towards the Nigeria Data Protection Act 2023 By Isa Ali Pantami appeared first on Tech Digest News.

TECHDIGEST – The Nigeria Data Protection Commission (NDPC) says it is investigating three banks, a university and other suspects over alleged data breach.

A data breach is an unauthorised access to confidential information.

The commission listed Zenith, Fidelity, Guarantee Trust Banks, Babcock University, Leadway Insurance, etc., for the interaction.

NDPC national commissioner Vincent Olatunji disclosed this in a statement on Thursday.

Mr Olatunji said the investigation came following complaints from data subjects. He explained that with the new Nigerian Data Protection Act (NDPA), the commission had been empowered with a legal framework to address issues of citizens’ data breaches.

READ ALSO: eNaira will reduce payment system cost – EMURGO Africa 

“In the last few weeks, the NDPC has received complaints bordering on unlawful data processing, unauthorised access to personal data and violation of data subjects’ rights,” stated the NDPC chief. “Under Part 10 of the newly signed NDPA 2023, a data controller with a turnover of N200 billion yearly may pay as high as N2 billion, which represents two per cent of the gross revenue.”

He added, “Not only that, offenders also risk up to one-year jail term. We are currently investigating Guarantee Trust Bank, Fidelity, Unity, Zenith banks, Leadway Insurance and Babcock University, among others, for data breach.”

According to him, many micro-finance banks have yet to align their operations with data privacy and protection requirements.

He further revealed that loaning organisations would face the law with the new mandate of the Federal Competition and Consumer Protection Commission.
Mr Olatunji said the mandate required loan organisations to seek compliance and clearance from NDPC before approving online lenders.

“The commission is investigating over 400 complaints in the online lending sector. Soko Loan is already working on a comeback to the digital lending market, but yet to be approved,” said the commissioner.

He, however, said that the commission was engaging in sensitisation exercises to ensure that data controllers understood the implications of a data breach.

According to the national commissioner, the NDPC prioritises awareness more than the scorched earth enforcement process.

(NAN)

The post NPDC probes GTBank, Zenith, Fidelity, Unity Bank for data breach appeared first on Tech Digest News.

TECHDIGEST – Last week, President Bola Tinubu, signed the Nigeria Data Protection Bill, 2023 into law. The new law has obviously excited data and technology experts who now feel Nigeria’s economy is about to witness investment boom like other countries who have passed a similar law.

The new law establishes the Nigeria Data Protection Commission and replaces the NDPB established by former President Buhari in February 2022.

The Commission will be led by a National Commissioner responsible for regulating the processing of personal information.

Since the new law came into effect positive predictions have trailed it, all pointing to the fact it could triple the fortunes of the industry which today stands at above N5.5 billion.

If the calculations are correct, it means that the industry could be valued at over N16 billion in no distant time.

Just recently, former Minister of Communications and Digital Economy, Professor Isa Pantami says the market value of Nigeria’s Data Protection Sector in the country was N 5.5 billion and predicted this figure could triple if data protection law came into effect.

READ ALSO: TNW Conference 2023: NITDA Unveils N10bn Funds For Startups, Hubs, Others 

Part of the reasons Pantami advanced for his prediction was that the law will give foreign investors the confidence to do business in Nigeria.

He said: “The Data Protection Bureau created many jobs in 2022. The value of the sector today is around 5.5 billion naira and could triple if a full law come into effect. It is a global best practice to have a data protection law in place; otherwise you will find it difficult to attract interventions that are of benefit to your country.

Secondly, even potential investors today may ask questions whether you have data protection laws in your country or not; if you don’t have any data protection law in place, they will feel uncomfortable coming to invest in that country, because today, data is critical” he added.

Meanwhile, Pantami is not alone in this view. All the experts who spoke to Hitech saw the move as a welcome development going by its potential market confidence.

How the economy will benefit

A tech lawyer and Managing Partner at Nubia Capital, a venture capital investor in tech companies, Mr. Davidson Oturu said: “With the growth of tech enabled businesses using data to drive financial technology, fintech, e-commerce and other online services, the laws will be crucial for market confidence.

“For instance, we saw a situation where following Kenya’s introduction of its Data Protection Act, Amazon Web Services, AWS, announced new investments in the country, including establishing part of its data cloud infrastructure in Nairobi.

“There were indications that the data protection law was what spurred AWS to invest in the country as it had been waiting for about seven years for the passage of such a law that would boost its confidence.

“The law can also assure the citizens and investors that the government will not exploit their personal information for unauthorised profiling, spying, or other forms of discrimination.

“With market confidence, will come trust, especially as some consumers may have lost faith in the ability of the government to protect their data following the recent surge of privacy infractions and data breaches by large internet companies and loan apps.

“Therefore, consumers may be more willing to participate in online activities like e-commerce, digital transactions, and online services when they have confidence that their data will be protected, which can help the economy,” Oturu stated.

Loan sharks, data manipulators up for raw deal

Speaking on the provisions of the law, Oturu said: “Some of the provisions of the law include the fact that before organisations transfer personal data, they have to comply with the certain provisions or risk sanctions.

“In terms of penalties, there are fines introduced and where someone’s personal data is infringed and used for profiting, the aggrieved person can get part of the profits made from the infringement.

“This would definitely work in situations where we see some of these loan sharks and other players who manipulate data and carrying out unethical activities.

“Furthermore, at a time when artificial intelligence, AI, is on the rise with its potential for data manipulation and deep fakes, having strong data protection laws will be crucial for responsible AI development and deployment as it will uphold ethical principles, preserves privacy, ensures compliance with regulations, fosters trust, and mitigates risks associated with data use,” he added

Also reacting, Chief Revenue and Data Officer, Enterprise Business Information systems, Mr Wale Awosokanre, said data is power and can always be monetized when properly managed and propagated. Awosokanre said: “This will help the government bring sanity to data management allowing for control in the use, which will impact positively the economy of Nigeria.

“Till date, data is sometime used to the disadvantage of the owner, which creates negative view of Nigeria and impacting on investments coming into the country; if we are able to reverse this, then positive investments can be attracted into Nigeria.”

Implementation Concerns

However, Awosokanre was worried about the implementation of the law noting that without adequate implementation, any law is just a piece of paper.

He raised some questions, including how to ensure compliance? What systems or trackers would be put in place to ensure adherence to the law and the competence in management of the Data commission.

Massive education and awareness

Meanwhile, the Executive Director, Paradigm Initiative, Mr Gbenga Sesan, wants the Nigeria Data Protection Commission as a matter of urgency to begin massive education and awareness for citizens and data handlers so that everyone knows their rights and responsibilities.

He said: “One of the challenges that this new law has immediately addressed is the need for an independent data protection regulatory agency because it is the right way to do it and also because all violators must be checked, including government agencies themselves.

“The independence will not come easy though, the Commission must defend it especially considering the contradictory Section 55 of the Act that gives the Minister power to dictate to the independent Commission,” Sesan advised.

Vanguard

The post Data protection Act: Nigeria may generate over N16bn in data businesses appeared first on Tech Digest News.

TECHDIGEST – The National Commissioner, Nigeria Data   Protection Bureau, NDPB,  Dr Vincent Olatunji, has been appointed into Forbes Technology Council for 2023.

Forbes Technology Council is an invitation-only community for world-class CIOs, CTOs and Technology Executives.

Scott Gerber, Forbes Councils’ founder said they are really excited to welcome Dr. Olatunji to the Council. He stressed that their mission with Forbes Councils is “to bring together proven leaders from every industry, creating a curated, social capital-driven network that helps every member grow professionally and make an even greater impact on the business world.”

“I am delighted to be counted worthy to join the Forbes Technology Council.

“It is another confirmation of our modest effort to ensure that our country is recognized among the global leaders in Data Protection compliance”, He said.

READ ALSO: Tinubu Signs Data Protection Bill into law 

Dr. Olatunji holds a doctorate degree in Geography and Planning from the University of Lagos. He is a Certified Public Private Partnership Specialist (IP3 Specialist) and a PECB Certified Data Protection Officer.

He is an accomplished professional with proven track records of delivering impactful results thereby excelling in building strong relationships across sectors and achieving tangible outcomes.

He has also successfully led teams, conducted extensive research, developed effective policies, and implemented strategic initiatives at all levels of government in Nigeria. His expertise lies in driving human growth and process transformation, and he is highly skilled in negotiation, networking, and public speaking.

He has worked in the public sector for over 30 years thereby bringing his wealth of experience and professionalism on board Forbes Technology Council.

Dr. Olatunji joined the National Information Technology Development Agency (NITDA) in 2002 and has worked in various departments thereby rising to the position of a director in 2014 and Acting Director General in 2016.

Prior to his appointment in February 2022 as the NDPB’s pioneer National Commissioner of NDPB, he worked as the Director of e-Government Development and Regulations at NITDA where he led a formidable team to deliver various initiatives on Nigeria’s digital transformation.

As Nigeria’s Data Protection Ombudsman, Dr. Olatunji’s relentless efforts and expertise have propelled him to the forefront in shaping policies and frameworks that align with international standards, bolstering Nigeria’s and Africa’s position in the global data protection landscape.

He has attended many Capacity Building programmes in various areas such as Public Sector Management, Project Planning and Management, Digital Transformation and Data Protection amongst others. He is a member of many committees of experts and has represented Nigeria at several local and international engagements.

The post NDPB Boss appointed into Forbes Technology Council appeared first on Tech Digest News.

TECH DIGEST- Over 110 organisations in Nigeria are being investigated for alleged data breaches, according to the Nigeria Data Protection Bureau (NDPB).

At a media roundtable in Lagos, Dr. Vincent Olatunji, the National Commissioner of the Bureau, revealed this.

READALSO: Valentine’s Day: Google Trends show Nigeria leading in search for love

He claims that businesses like banks, telecom companies, gaming businesses, and internet lending businesses are among those under investigation. He claimed that these industries had significant vulnerabilities in part because of the intrusive mobile apps that these companies use to deliver their services.

The Bureau recently licenced 48 more Data Protection Compliance Organizations (DPCOs), bringing the total number of DPCOs to 138, according to Olatunji. The National Commissioner claims that this has increased the ecosystem’s richness and job development.

Nigeria, he claimed, was ready to take the lead in increasing data privacy and investigating the possibilities offered by the global digital economy. Olatunji assured the populace that any unlawful processing of personal data from their territory would result in accountability for every data controller and data processor, whether they were based in Nigeria or not.

President Muhammadu Buhari formed the NDPB in February 2002 to serve as the country’s data protection authority and to completely carry out the requirements of the Nigeria Data Protection Regulation (NDPR), which was released in 2019.

The post NDPB: Nigeria Probes 110 Firms for Data Breaches appeared first on Tech Digest News.

By Yusuf Yusuf

TECHDIGEST – “People who end up being first don’t actually set out to be first, they set out to do something they love”. Thus, creating a lasting legacy for themselves.

The pioneer National commissioner/Chief Executive officer of the Nigeria Data Protection bureau, is one man who have risen through ranks, expertise both in administrative roles as well as information technology field as a formidable force whose trajectory of achievements keep many on their toes. All these, he has managed to achieve without giving room for the notion of imitation but rather, by setting an exemplary step in advancing policies to ensure the development of the status quo.

A Certified Public Private Partnership Specialist (IP3 Specialist) and a PECB Certified Data Protection Officer, Dr Vincent (FIIM, IAPP, and NCS) is a promising figure the technology world needs to watch out for in coming years.

He joined NITDA in 2002 and has worked in various departments thereby rising to the position of a Director in 2014 and Acting DG in 2016 amongst other roles served in various departments before his recent appointment as National Commissioner.

In just over a year, Dr Vincent Olatunji is creating a new legacy as the pioneer National Commissioner/Chief Executive officer of the Nigeria Data Protection Bureau while setting the pace for the institutionalization of data protection laws in Nigeria.

the Nigeria Data Protection Bureau (NDPB) is an intrinsic segment of the Ministry of Communications and Digital Economy born on the 4th of February , 2022 out of the need to uphold the National Digital Economy Policy for digital Nigeria (NDEPS) by further strengthening as well as entrenching the protection of personal identifiable information as well as sensitive personal data.

READ ALSO: NDPB Investigates GT Bank, Zenith Over Data Breach Complaints

Such data includes : emails, names, telephone numbers, house address, religious beliefs, political lineage, medical records, labour union affiliations information being uploaded online in line with standard global practices in a digital economy.

The objective of the bureau as stipulated by the Nigeria data protection regulation 2019 (NDPR) include

1. Safeguard the rights of natural persons to data privacy

2. Foster safe conduct for transactions involving the exchange of personal data

3. Prevent manipulation of personal data and

4. Ensure that Nigerian businesses remain competitive in international trade through the safeguards afforded by a just and equitable legal regulatory framework on data protection

While keying into the global digital revolution is inevitable , it is only pertinent that this rising need is met with accurate preparedness. It is on this note, a major milestone was recorded under the able leadership of his Excellency Dr. Isa Ali Ibrahim Pantami , with the launch of the National Digital Economy Policy and strategy for a digital Nigeria ( NDEPS).

The NDEPS was launched by President Muhammadu Buhari (GCFR) in 2019.

This subsequently led to the re-designation of the Ministry of Communications to include digital economy giving it a new phase.

With this development, the journey of the much desired and envisioned digital Nigeria began. This was however, followed by a number of restructuring to accommodate the new set mandate of the Ministry And such restructuring included, the NDPR.

Inarguably, Dr . Vincent has continued laying exemplary standards for any successor to measure up to in time memorial as he has managed to adapt existing resources and manpower to carter for the immediate needs of his bureau to ensure swift and immediate operations against all odds to kick start immediate operations.

Stepping into the herculean task of laying a solid bedrock for data protection policies and strategies. without giving rooms for doubts or sloppiness while distinguishing himself as a formidable force to reckon with, as a pioneer ,may pose a major challenge to many. This is because; the way of the pioneer is always filled with different hurdles stemming from proper administration to implementation of policies. However, Dr Vincent draws strength from his love for his profession. Leaving no stone untouched in his quest for achieving excellence as he emulates the popular saying that

“People who end up being first don’t actually set out to be first, they set out to do something they love”.

The Bureau, within the last one year of its establishment, has recorded significant growth under various parameters including but not limited to the following:-

• Rate of increment of the public sector integration into data privacy and protection framework – 100%,

• Rate of increment in the enrolment of DPOs from data controllers and processors across Nigeria – 600%,

• Rate of increment in the licensing of Data Protection Compliance Organizations (DPCOs) – 50%

Similarly, revenue generation through the implemention of the NDPR has increased by over 60%.

The foregoing milestones are taking place at a time when the Digital Economy under Prof. Isa Ali Ibrahim Pantami is breaking records in its contribution to Nigeria’s GDP. The ICT sector for instance contributed 18.44% to the total real GDP in Quarter 2 of 2022 – outperforming virtually all other sectors. The establishment of the Bureau, under the visionary leadership of President Muhammadu Buhari, GCFR has strengthened the bulwark of fundamental rights and freedoms of Nigerian citizens in the data economy ecosystem and has, to all intents and purposes, earned Nigeria a pride of place in the arena of international data governance and human capital development.

With the recently approval of the Nigeria Data Protection Bill by Federal Executive Council (FEC) for further ratification and endorsement by the National Assembly, we wish Dr. Vincent, twice as much of the successes recorded by him just in one year as he sets out to achieve greater developments in the strategic implementation of data protection laws in Nigeria,

The post NDPB at One : The Evolution of Data Privacy under Dr. Vincent Olatunji, PhD appeared first on Tech Digest News.

TECHDIGEST – The Nigeria Data Protection Bureau (NDPB) has honoured the Nigeria Digital Identification for Development (ID4D) Project with an Institutional Pillar of Support Award, in appreciation of the project’s support to the Bureau.

According to a Press Release signed by the Nigeria Digital ID4D Communications Manager, Dr. Walter Duru, the Award was received by the Nigeria ID4D Project Coordinator, Musa Odole Solomon at the 2023 edition of the annual National Privacy Week Dinner/Award and First Year Anniversary of the Nigeria Data Protection Bureau, held at Transcorp Hilton, Abuja, weekend.

Presenting the Award, National Commissioner and Chief Executive Officer of the Nigeria Data Protection Bureau, Dr. Vincent Olatunji, commended the Nigeria Digital ID4D project for its support to the Bureau, reiterating commitment to continue to partner with the project.

Olatunji, who thanked the Honourable Minister of Communications and Digital Economy, Professor Isa Ali Pantami for his leadership roles, described the Nigeria Digital ID4D as a Pillar of Support to the Bureau.

READ ALSO: Omeife: Meet First African Humanoid Robot, Built and Completed in Nigeria

He reiterated the commitment of the NDPB to creating awareness on data protection and privacy in the country, urging stakeholders to continue to support the Bureau to achieve results.

“The journey of the NDPB started under the National Information Technology Development Agency (NITDA). NDPB is a year old. In the last one year, a lot has happened.

“We are grateful to the Honourable Minister of Communications and Digital Economy, who stood by us all the way. Awareness creation is very important to us. The task requires collective efforts. We are here today to thank you for your support, and we are looking forward to the future,” he added.

Receiving the Award, Project Coordinator, Nigeria Digital ID4D project, Musa Odole Solomon described the NDPB as a “worthy partner”, pledging the project’s continued support to the Bureau.

“From the inception of the NDPB, we have been working with them. From day one, we knew they were worthy partners. The achievements recorded and level of collaboration could not have been possible, without the kind of leadership in place at the Bureau. We will continue to support the Bureau.”

Delivering his keynote address, Nigeria’s Minister for Communications and Digital Economy, Prof. Isa Ali Pantami described data privacy and protection as critical to the nation, assuring that the data protection bill was set for transmission to the National Assembly for consideration.

It would be recalled that the Nigeria Data Protection Bureau had communicated her intention to honour the Nigeria ID4D project at the Bureau’s one year anniversary.

In a letter dated 26th January 2023, with the subject “Conferment of Institutional Pillar of Support Award”, signed by the National Commissioner/CEO of the NDPB, Dr. Vincent Olatunji, the Bureau expressed appreciation to the project for her invaluable support.

The letter reads in part: “I am pleased to convey the decision of the Bureau to confer on your highly esteemed institution the “Institutional Pillar of Support Award.”

“This award is in recognition of your invaluable support towards the establishment and growth of the Nigeria Data Protection Bureau.”

The post Data Protection Bureau Honours Nigeria ID4D appeared first on Tech Digest News.

TECHDIGEST – The Nigeria Data Protection Bureau has opened an investigation into allegations of data breach by two Nigeria Banks, namely GT Bank and Zenith Bank. This investigations were triggered by allegations of unlawful disclosure of banking records to a third party and unlawful access and processing of personal data.

According to the directive of the National Commissioner and CEO, NDPB, Dr. Vincent Olatunji, the investigation covers the data governance practice of the banks in all their branches in Nigeria and extends to all third parties carrying out data processing activities. The Bureau notes with concern that many data privacy and protection regulations and best practices are hardly implemented down the organizational strata of major data controllers in Nigeria.
Similarly, the Bureau enjoins organizations to heed the Federal Government circulars and general compliance notice directing them to send the names of their Data Protection Officers/Contacts to the Bureau.

READ ALSO: NITDA Engages Partners On Digital Acceleration Programs For Nigerian Startups

There are reports by Nigeria Inter Bank Settlement System (NIBSS) which indicated that within 9 months of 2020, fraudsters attempted 46,126 attacks and they were successful in 41,979 occasion representing 91% of the time! This level of vulnerability to data breach is unacceptable and it can only be addressed through foolproof data security and data privacy measures by data controllers/data processors in the industry.

The National Commissioner enjoins all financial institution to emulate the example of the Central Bank of Nigeria in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and in creating a robust data governance system.

The National Privacy Week is an opportunity for all organizations to set their records straight on how they handle the data of citizens. Enforcement measures will be taken against wilful violators of privacy rights forthwith.

The post NDPB Investigates GT Bank, Zenith Over Data Breach Complaints appeared first on Tech Digest News.

TECHDIGEST – Nigeria will on Saturday 28th of January 2023 join the international community to observe Global Data Privacy Day 2023.It is a Day that has been set aside to create awareness of fundamental rights and freedoms relating to the privacy of citizens in the data processing ecosystem.

In line with the overarching global objective of awareness on data privacy, the Nigeria Data Protection Bureau (NDPB), will be organizing a National Privacy Week, which is a week of intensive focus on awareness creation in the area of data subjects’ rights, capacity building on data governance, data breach remediation among others.

READ ALSO: Nigeria Hosts Regional Digital Economy Conference

The Hon. Minister of Communications and Digital Economy, Prof. Isa Ali Ibrahim Pantami, will flag-off the National Privacy Week with a press conference on the Global Data Privacy Day. The National Privacy Week also coincides with the one year anniversary of the establishment of the Bureau. 

The NDPB under the leadership of Dr. Vincent Olatunji as its National Commission and CEO will set-up an Accelerated Data Breach Remediation unit to resolve petitions from data subjects within the National Privacy Week.

The post Global Data Privacy Day 2023: NDPB To Hosts National Privacy Week appeared first on Tech Digest News.

TECHDIGEST – Nigerian privacy watchdog, Nigeria Data Protection Bureau (NDPB), may have imposed hefty fines on some ICT/telecom and financial institutions after investigations proved data breaches significant enough to raise concerns by regulatory authorities, persons familiar with the matter told IT Edge News.

IT Edge News learnt the organisations have accepted the sanction procedures, agreed to pay the fines and pleaded for non-publicity of the matter fearing this could undermine their global standing as Nigeria’s privacy watchdog waddles through challenges of asserting its authority and raising awareness on the Nigeria Data Protection Regulation (NDPR).

The NDPB has been relatively active in enforcing the NDPR within the private sector. But new memos by the Secretary to the Government of the Federation, Mr. Boss Mustapha, and the Head of Service, Dr. Folasade Yemi-Esan, directing all federal ministries, departments and agencies (MDAs) to comply with the NDPR would allow the data ombudsman robust reign enforce the NDPR in the public sector.

READ ALSO: Buhari Affirms Nigeria Dedication Towards Data Privacy

Earlier this year, the regulator opened investigations into reports of breach of data privacy involving Wema Bank PLC and KC Gaming Networks (Bet Naija), two top actors in corporate Nigeria to signal its resolve to penalise breaches by major data controllers in Nigeria.

The NDPB investigated complaints by customers of Wema Bank alleging that their data had been used without their consent to open accounts via the ALAT app – the digital banking platform of the bank. Personal data of customers of Bet Naija were allegedly breached within their system but the firm failed to file notification even though the breaches were quickly addressed.

The post Nigeria privacy watchdog imposes fines for data breaches appeared first on Tech Digest News.