The Nigeria Data Protection Commission (NDPC) has said it will investigate the alleged unauthorized access to the data of enrollees by the National Identity Management Commission (NIMC) by a company called XpressVerify.com,
NDPC said this following a report by FIJ that XpressVerify.com is running a service that enables people to check the National Identification Number, NIN for a token on their website indiscriminately.
National Identity Management Commission (NIMC) had in an earlier statement indicated that it does have not any form of third-party agreement for verification of NIN with XpressVerify.com.
NIMC also said it has begun an investigation into alleged unauthorized access to the NIN data by XpressVerify.com
NDP noted that there are public concerns over reports of illegal access to personal data of enrollees by the shadowy entity in a statement issued on Sunday in Abuja by its National Commissioner, Dr Vincent Olatunji and signed by Mr Babatunde Bamigboye, Head of Legal, Enforcement and Regulations of NDPC.
The National commissioner further directed that preliminary findings of the investigation should be made public within seven days.
“This investigation is a further regulatory measure to be taken by NDPC in the wake of public concerns over reports of illegal access to personal data of enrollees by a shadowy entity called XpressVerify.com,” Olatunji said.
He recalled that the NDPC had been engaging with NIMC on fostering adequacy of data protection and consequently had a workshop in February.
According to him, this is one in a continuum of measures being put in place by the Federal Government to ensure data privacy and protection.
“We note that NIMC has initiated internal investigation and it has immediately given full assurance of cooperation with NDPC.
“NDPC will get to the root of the allegation and review existing mediums through which any entity may lawfully verify the identity of enrollees on its platform.
“Furthermore, NDPC will work with relevant agencies to audit the trails of the alleged unauthorised data processing and monetisation of same,” he said.
Olatunji noted that those who were found culpable for violating the Nigeria Data Protection Act, 2023, would be brought to justice.