Nigeria’s National Data Protection Commission has launched an investigation into allegations that agents of the National Identity Management Commission (NIMC) are illegally selling citizens’ personal data through online platforms. The compromised information includes National Identification Numbers (NINs), Bank Verification Numbers (BVNs), and photographs. The security breach comes at a time when Nigeria has made significant progress in its digital identity infrastructure, with the NIMC recently reporting over 122 million citizens registered in its National Identity Database.
The National Data Protection Commission (NDPC) is leading the investigation into the reported data breach. The commission has stated that NIMC or any agents found responsible for unauthorized sales of personal data could face penalties of up to N10 million or 2 percent of their annual revenue. The enforcement action follows previous regulatory measures in Nigeria, where the NIMC had terminated over 100 registration partners for extortion and other violations.
Evidence of the ongoing data trade emerged when a user reported successfully purchasing four sets of personal data through online sales platforms, demonstrating the accessibility of this sensitive information. The involvement of NIMC agents suggests an insider breach of the national identity database, raising particular concerns given the recent nationwide migration to the new NINAuth digital verification platform.
The unauthorized sale of personal data poses risks for identity theft, financial fraud, and other forms of cybercrime. The situation is especially significant given Nigeria’s growing digital banking sector, which now includes over 66.2 million BVN-linked bank accounts. The NDPC’s investigation and threatened penalties demonstrate regulatory efforts to address data protection violations within Nigeria’s identity management system.
The national identity system in Nigeria requires citizens to register for a unique National Identification Number, which is linked to biometric and demographic data. The system provides reliable identification for access to government services and financial transactions, and has become increasingly important as Nigeria continues to expand its digital government services through initiatives like the NINAuth verification platform.
Sources: Nairaland
