Nigeria Data Protection Commission probes UNILAG and Lotus Bank

data privacy investigation student data misuse Nigeria Data Protection Act unauthorized bank accounts forensic probe

The Nigeria Data Protection Commission (NDPC) has launched a forensic investigation into the University of Lagos (UNILAG), Lotus Bank, and Hackerbella Ltd following allegations that students’ personal data was used to open bank accounts without a lawful basis.

National Commissioner and CEO Vincent Olatunji has deployed an investigation team to determine how the data was collected, used, and disclosed. The probe aims to assess whether the organizations complied with the Nigeria Data Protection Act 2023, specifically regarding privacy notices, data-sharing arrangements, and purpose limitation.

Investigators will also examine the adequacy of technical safeguards, data minimization practices, and whether any automated decision-making or credit profiling was conducted without transparency. The commission stated the investigation is intended to identify potential risks to the rights and freedoms of the affected students.