News Highlights:
- The NDPC has launched a formal investigation into an alleged data breach at the Corporate Affairs Commission (CAC), citing rising threats from sophisticated cyber-attacks.
- The Commission is reviewing critical data protection systems and engaging key stakeholders to strengthen safeguards, while assuring the public that Nigeria’s data protection framework remains resilient.
The Nigeria Data Protection Commission (NDPC) has commenced an investigation into an alleged data breach at the Corporate Affairs Commission (CAC), citing concerns over the security of sensitive information within Nigeria’s digital ecosystem.
The probe, initiated pursuant to Section 46(3) of the Nigeria Data Protection Act, 2023, signals the Commission’s commitment to maintaining trust in the country’s data-driven economy.
In a statement signed by Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at the NDPC, the Commission warned that threat actors are increasingly deploying sophisticated methods to compromise critical databases, including large-scale data exfiltration and cross-platform breaches across interconnected systems.
As part of its regulatory response, the National Commissioner and Chief Executive Officer of the NDPC, Vincent Olutunji, has directed the agency’s technical team to immediately engage with relevant authorities and key institutions.
The move, according to the Commission, is aimed at reinforcing existing safeguards governing the processing and protection of personal data.
The scope of the investigation will include a comprehensive review of access control mechanisms, Data Privacy Impact Assessments, and Vulnerability Assessment and Penetration Testing (VAPT) protocols. It will also examine compliance procedures and due diligence practices involving third-party data processors.
Despite the reported breach, the NDPC reassured the public that Nigeria’s data protection frameworks, spanning technology, policy, and institutional capacity, remain robust.
The Commission pointed to the growing adoption of data-driven services as evidence of increasing confidence in the system.
It added that ongoing regulatory interventions are critical to sustaining public trust and encouraging continued investment in Nigeria’s expanding digital economy.