The Nigeria Data Protection Commission has opened a forensic investigation into the University of Lagos, Lotus Bank and Hackerbella Ltd following complaints that students’ personal data were used to open bank accounts without a lawful basis.
Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at the NDPC, disclosed the development in a statement issued in Abuja on Wednesday. He said National Commissioner Vincent Olatunji directed the investigation team to carry out a comprehensive review of how the affected students’ data were collected, used and shared.
The probe will examine the respective roles of the three parties and assess their compliance with the Nigeria Data Protection Act, 2023. Key areas of focus include whether Data Protection Impact Assessments were conducted, the lawfulness and transparency of any credit scoring or profiling activities, and the use of automated decision-making systems.
Investigators will also review the adequacy of privacy notices, data-sharing arrangements, lawful bases for processing, data minimisation practices, purpose limitation, retention policies, and the technical and organisational measures put in place to protect data subjects’ rights. The commission will evaluate potential risks to the rights and freedoms of the students involved.
Bamigboye stressed that institutions handling the personal data of students, staff and other community members must process such information lawfully, fairly, transparently and securely.
He urged educational institutions yet to comply with existing NDPC data protection directives to do so promptly, noting that adherence is essential for safeguarding individual rights and promoting responsible data governance in the education sector.
A story of courage, wonder, and the transformative power of self-belief; perfect for readers aged 10+ who love adventure. To place order: +234 806 130 3237 | +234 803 582 0870 OR Tap the link to grab a copy:https://www.zeekapublish.com/product/the-magical-life-of-anna

