NDPC Probes Lotus Bank and UNILAG over Student Data Misuse

• The Nigeria Data Protection Commission has launched a forensic investigation into UNILAG, Lotus Bank, and Hackerbella Ltd over alleged violations of data protection laws.
• The probe follows complaints about the misuse of student information, with the NDPC working to determine the extent of the alleged violations.
• Educational institutions in Nigeria must comply with the Nigeria Data Protection Act to avoid fines and reputational damage.

The investigation is ongoing, with the NDPC working to determine the extent of the alleged violations and whether any laws have been broken.

The Nigeria Data Protection Commission (NDPC) has launched a forensic investigation into the University of Lagos (UNILAG), Lotus Bank, and Hackerbella Ltd. The probe follows allegations of unlawful use of students' data by these entities. According to sources, the NDPC received complaints about the misuse of student information, prompting the commission to take action.

The investigation is ongoing, with the NDPC working to determine the extent of the alleged violations and whether any laws have been broken.

The Nigeria Data Protection Act (NDPA) sets out strict guidelines for the collection, storage, and use of personal data in Nigeria. Educational institutions, including UNILAG, are required to comply with these regulations to avoid fines and reputational damage. The NDPC has been actively enforcing the NDPA, with a focus on protecting the rights of individuals whose data may have been compromised.

Lotus Bank, as a financial institution, is also subject to the NDPA, which requires it to maintain robust data protection measures. The bank's alleged involvement in the misuse of student data raises concerns about its compliance with the regulation.

The investigation by the NDPC highlights the importance of data protection in Nigeria's educational sector. UNILAG and other institutions must ensure that they are collecting, storing, and using student data lawfully to avoid reputational damage and potential fines.

Lawyers advising educational institutions should review their data collection and storage practices to ensure compliance with the NDPA. This includes implementing robust security measures, obtaining informed consent from students, and maintaining transparent data management policies.

Lawyers advising educational institutions should review their data collection and storage practices to ensure compliance with the Nigeria Data Protection Regulation, as non-compliance can result in fines and reputational damage.

Source: Original reporting via Vanguard News