Ayodeji Ayenuwa
The Nigeria Data Protection Commission (NDPC) has launched an investigation into alleged data breaches involving three major companies: OPay, Meta, and DHL.
These firms have been summoned by the NDPC in response to complaints that have surfaced, accusing them of violating data subjects’ rights.
According to the Nigeria Data Protection Act, OPay, Meta, and DHL are designated as data controllers and must strictly adhere to data protection protocols while handling the personal information of Nigerian citizens.
The stakes are high, as a potential penalty awaits each company if found guilty – a forfeiture of 2% of their gross revenue, as stipulated in the Data Protection Act.
The complaints against these corporate giants are specific and concerning. One source, speaking on the condition of anonymity, revealed that each company faces distinct allegations, all centered on data breaches:
Meta, the social media giant, is accused of engaging in “behavioral advertising without obtaining explicit consent from data subjects”. The scale of this alleged violation is substantial, potentially affecting approximately 40 million Facebook accounts in Nigeria. This issue also raises critical questions about the impact on Nigeria’s growing digital economy.
DHL, the courier company, is currently under investigation for allegedly violating lawful data protection principles. A Civil Society Organization, dedicated to safeguarding citizens’ privacy rights, claims that DHL’s data processing does not meet the confidentiality standards mandated by the Nigeria Data Protection Act. Section 24(2) of the Act emphasizes the necessity of preserving the confidentiality, integrity, and availability of personal data.
OPay, the fintech company, is in the spotlight for allegations that it opens bank accounts for data subjects without their consent. Such an action, if proven true, would represent a grave violation of data privacy rights affecting a substantial number of data subjects, approximately 40 million according to reports.
The Nigeria Data Protection Commission has started formal investigations and has given each of these companies a Notice of Investigation, starting the process of looking into these alleged data breaches.
Techrectory with Agency Report.
