The Nigeria Data Protection Commission (NDPC) has launched a forensic investigation into the University of Lagos (UNILAG), Lotus Bank and Hackerbella Ltd over allegations that students’ personal data was used to open bank accounts without a lawful basis.
The investigation follows public complaints concerning the collection, processing and use of students’ personal information by the three organisations.
Vincent Olatunji, NDPC’s national commissioner and chief executive officer, has directed an investigation team to establish the circumstances surrounding the collection, use and disclosure of the affected students’ personal data and determine the roles and responsibilities of each party.
The investigation will also assess the data protection compliance obligations of UNILAG, Lotus Bank and Hackerbella under the Nigeria Data Protection Act 2023 (NDP Act).
The commission noted that investigators will examine whether the processing of students’ data had a valid legal basis and whether the affected individuals were adequately informed about how their information would be used.
The probe will cover several areas, including Data Protection Impact Assessments (DPIAs), privacy notices, data-sharing arrangements, data minimisation, purpose limitation and data retention policies.
The NDPC will also examine any credit scoring or profiling activities involving the students, including the lawfulness and transparency of such practices, as well as the use of automated decision-making systems.
The adequacy of technical and organisational…
Source link
Read Full Article by Folake Balogun at businessday.ng
Source link
