The Nigeria Data Protection Commission (NDPC) has launched an investigation into the University of Lagos (UNILAG) and Lotus Bank over allegations that student bank accounts were opened without proper authorisation. The probe follows a complaint received by the commission, which is examining whether the institutions violated the Nigeria Data Protection Regulation (NDPR) and other relevant privacy laws.
Allegations of Unauthorised Account Opening
According to the NDPC, the complaint alleges that UNILAG and Lotus Bank opened bank accounts for students without their explicit consent. The commission said it is looking into the circumstances surrounding the alleged unauthorised account creation, which may have involved the processing of students' personal data without lawful basis.
The NDPC's investigation is part of its mandate to enforce data protection laws and ensure that organisations handling personal data comply with the NDPR. The commission has the power to impose sanctions, including fines, on entities found to be in breach of the regulation.
NDPC's Regulatory Action
In a statement, the NDPC confirmed that it had received a formal complaint and had initiated a full investigation. The commission said it would invite representatives from both UNILAG and Lotus Bank to provide explanations and documents related to the alleged incident.
"The Commission is committed to protecting the privacy rights of Nigerians, especially students, and will take appropriate action if any breach is established," a spokesperson for the NDPC said. The investigation is expected to be concluded within a specified timeframe, and the findings will determine whether any enforcement measures are necessary.
Impact on Students and Institutions
If the allegations are proven, UNILAG and Lotus Bank could face significant fines and reputational damage. Students whose data was allegedly mishandled may also have recourse to seek redress under the NDPR, which provides for compensation for individuals who suffer harm due to data breaches.
The case highlights the growing importance of data protection in Nigeria's educational and financial sectors. The NDPC has been increasingly active in recent months, issuing guidelines and conducting audits to ensure compliance across various industries.
The investigation is ongoing, and the NDPC has urged anyone with relevant information to come forward. The commission's final report will be made public, and any sanctions will be announced in accordance with the law.
