NGO urges NIMC, NDPC to address data breaches
A non-profit organisation Paradigm Initiative, has called for instant action from the National Identity Management Commission NIMC, in response to an acute privacy breach involving unauthorised access to citizens’ data via XpressVerify.com.
The report by the Foundation for Investigative Journalism on March 16 alleged that XpressVerify has unrestricted access to the NINs and personal details of all Nigerians registered in the nation’s identity database managed by NIMC.
The breach is considered to be a violation of both the National Data Protection Act and citizens’ constitutional right to privacy and has been criticized by Paradigm Initiative as a flagrant disregard for the law and a betrayal of public trust.
Paradigm Initiative emphasized the urgency of intervention from the NIMC and the Nigerian Data Protection Commission to address this egregious violation of citizens’ privacy rights.
“The NDPC must swiftly investigate this matter, holding accountable all parties involved in compromising the security of the National Identity Database.
“Every Nigerian has the right to trust that their personal information is secure and protected. We further demand NIMC outlines steps to rectify this breach and prevent future occurrences,” the statement continued.
Paradigm Initiative also urged NDPC to act decisively in upholding the principles of data protection and safeguarding citizens’ privacy rights as enshrined in the NDPA and the constitution.
“All these demands are outlined in the freedom of information request sent by Paradigm Initiative, and we remain committed to collaborating with all involved agencies and relevant stakeholders to ensure the privacy rights of all are protected,” the group concluded.
Furthermore, it suggested that XpressVerify has monetized this access to NINs and the personal information of citizens on the database.
Despite the allegations, NIMC, in a statement on Sunday, disclaimed any affiliation with XpressVerify.
The Director-General and CEO of NIMC, Abisoye Coker-Odusote, clarified that the commission solely provides NIN verification and other services through licensed partners
Part of that statement reads, “The Commission wishes to state that it offers NIN verification and other services through licensed partners. However, XpressVerify is not one of the Commission’s licensed partners.
“We express our gratitude to our media partners and the whistleblowers for bringing this to our attention and wish to assure Nigerians and legal residents that there is no data breach of any sort and the Citizens’ data is safe and secure in Nigeria’s National identity database.”
PUNCH/ Chidimma Gold
