The Nigeria Data Protection Bureau on Tuesday, said it has opened an investigation into allegations of data breach by two Nigeria Banks, namely: Guarantee Trust and Zenith Bank, respectfully.
The Bureau explained that the investigations carried out against the two banks, were triggered by allegations of unlawful disclosure of banking records to a third party and unlawful access and processing of personal data.
National Commissioner and Chief Executive Officer, NDPB, Dr. Vincent Olatunji, who ordered the investigation, also directed that the investigation should cover the data governance practices of the banks in all their branches in Nigeria and extends to all third parties carrying out data processing activities.
Olatunji observed that with great concern that many data privacy, and protection regulations, and best practices are hardly implemented down the organizational strata of major data controllers in Nigeria.
The Head, Legal Enforcement and Regulation, NDPB, Babatunde Bamigboye, in a statement on Tuesday stated that the Bureau similarly enjoined organizations to heed the Federal Government circulars and general compliance notice directing them to send the names of their Data Protection Officers and Contacts to the Bureau.
“There are reports by Nigeria Inter Bank Settlement System (NIBSS) which indicated that within 9 months of 2020, fraudsters attempted 46,126 attacks and they were successful in 41,979 occasion representing 91% of the time
“This level of vulnerability to data breach is unacceptable and it can only be addressed through foolproof data security and data privacy measures by data controllers/data processors in the industry.
“The National Commissioner enjoins all financial institution to emulate the example of the Central Bank of Nigeria in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and in creating a robust data governance system.
“The National Privacy Week is an opportunity for all organizations to set their records straight on how they handle the data of citizens. Enforcement measures will be taken against wilful violators of privacy rights forthwith”. The Agency stated.
