The Nigeria Data Protection Commission has commenced an investigation into the University of Lagos, Lotus Bank and Hackerbella Ltd following complaints over the alleged misuse of students’ personal information.
The commission said the probe was triggered by claims that students’ details were allegedly used to create bank accounts without proper legal authorisation.
In a statement issued by its Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, the NDPC said its National Commissioner, Dr Vincent Olatunji, had ordered a detailed examination of the matter.
The statement read, “The Nigeria Data Protection Commission (NDPC) has commenced a forensic investigation into the University of Lagos (UNILAG), Lotus Bank and Hackerbella Ltd following public complaints alleging the use of students’ personal data to open bank accounts without a lawful basis.”
The investigation is expected to establish how the affected students’ information was obtained, processed and shared, as well as determine the responsibilities of each organisation involved.
The commission will also assess whether the parties complied with the Nigeria Data Protection Act, 2023, including requirements covering privacy, data sharing, profiling, retention and security measures.
According to the NDPC, investigators will examine whether the alleged activities could have affected the rights and freedoms of the students involved.
The commission also reminded educational institutions that handling students’ and staff members’ personal information comes with a duty to protect such data and process it in line with the law.
It consequently warned institutions yet to meet its data protection requirements to take immediate steps to comply.
The NDPC said the investigation remains ongoing.
