The Nigeria Data Protection Commission (NDPC) has launched a forensic investigation into the University of Lagos (UNILAG), Lotus Bank and Hackerbella Ltd over allegations that students’ personal data was used to open bank accounts without a lawful basis.
The investigation follows public complaints concerning the collection, processing and use of students’ personal information by the three organisations.
Vincent Olatunji, NDPC’s national commissioner and chief executive officer, has directed an investigation team to establish the circumstances surrounding the collection, use and disclosure of the affected students’ personal data and determine the roles and responsibilities of each party.
The investigation will also assess the data protection compliance obligations of UNILAG, Lotus Bank and Hackerbella under the Nigeria Data Protection Act 2023 (NDP Act).
The commission noted that investigators will examine whether the processing of students’ data had a valid legal basis and whether the affected individuals were adequately informed about how their information would be used.
