1 hour ago
1
The Nigeria Data Protection Commission, NDPC, has initiated an investigation into the reported data breach at the Corporate Affairs Commission, CAC.
This investigation, which is in pursuant to Section 46(3) of the Nigeria Data Protection Act, 2023 (NDP Act), underscores the importance of fostering trust in Nigeria’s economic environment, according to the agency.
The NDPC noted with concern that threat actors in the digital space have devised malicious methods of compromising the data security architecture of key databases.
It said that these involve large-scale data exfiltration and cross-platform compromise across interconnected systems.
As part of a continuum of regulatory support measures, a statement signed by Babatunde Bamigboye, Esq, Head, Legal, Enforcement and Regulations of NDPC said the National Commissioner of the NDPC, Dr Vincent Olutunji, has directed the Commission’s technical team to immediately interface with relevant authorities and pivotal organisations, with a view to reinforcing existing guardrails for the processing of personal data.
“The investigation of the instant case will, inter alia, cover the procedures and outcomes of Access Control Mechanisms, Data Privacy Impact Assessments, Vulnerability Assessment and Penetration Testing, VAPT, as well as due diligence on third-party data processors,” it said.
The NDPC assured members of the general public that frameworks for data protection, in terms of technology and other requisite resources in Nigeria, remain fundamentally strong. This is evident in the increasing rate of access to data-driven services.
Alleged data breach: NDPC investigates Corporate Affairs Commission
