The Nigeria Data Protection Commission (NDPC) is investigating the University of Lagos, Lotus Bank, and Hackerbella Ltd, according to NTA.
The probe follows complaints that student data was used to open bank accounts without consent, reportedly as part of a “Smart ID Card” project combining student IDs with bank cards.
NDPC National Commissioner Dr. Vincent Olatunji has ordered a full review of how the data was collected and shared, NTA reports. Investigators will examine whether the organizations complied with the Nigeria Data Protection Act of 2023, including their privacy notices, data security measures, risk assessments, and any use of automated profiling.
Head of Legal, Enforcement and Regulation Babatunde Bamigboye said the probe will determine accountability and whether student data was retained longer than necessary, per NTA.
NDPC has warned all Nigerian educational institutions to review their data practices immediately, cautioning that non-compliance will result in strict legal action.
