SHALOM OLALEYE
The Nigeria Data Protection Bureau has opened an investigation into allegations of data breach by GT Bank and Zenith Bank.
This investigation was triggered by allegations of unlawful disclosure of banking records to a third party and unlawful access and processing of personal data.
There are reports by Nigeria Inter Bank Settlement System (NIBSS) which indicated that within 9 months of 2020, fraudsters attempted 46,126 attacks and they were successful in 41,979 occasion representing 91% of the time! This level of vulnerability to data breach is unacceptable and it can only be addressed through foolproof data security and data privacy measures by data controllers/data processors in the industry.
According to the directive of the CEO, NDPB, Vincent Olatunji, the investigation covers the data governance practice of the banks in all their branches in Nigeria and extends to all third parties carrying out data processing activities. The Bureau notes with concern that many data privacy and protection regulations and best practices are hardly implemented down the organizational strata of major data controllers in Nigeria.
Similarly, the Bureau enjoins organizations to heed the Federal Government circulars and general compliance notice directing them to send the names of their Data Protection Officers/Contacts to the Bureau.
