News Highlights:
- The NDPC has initiated a full-scale investigation into Optasia over suspected non-compliant data processing activities.
- NDPC stresses that data controllers relying on third parties for data processing must ensure those parties are registered with the Commission.
National Commissioner/CEO, National Data Protection Commission (NDPC), Dr. Vincent Olatunji, has ordered a full-scale investigation into the data processing activities of Optasia which operates in Nigeria as Nairtime Nigeria Ltd.
Digital TimesNG understands that this investigation was triggered by a pattern of suspected non-compliant data processing which was discovered during routine regulatory oversight of data controllers and data processors of major importance.
Babatunde Bamigboye, Head, Legal, Enforcement & Regulations at NDPC said in a statement that the “Commission notes with grave concern that Optasia deploys privacy invading technologies to process personal data for the purposes of marketing, credit scoring and other financial solutions.”
Digital TimesNG reports that the investigation of credit scoring activities covers the way financial institutions, telecommunication companies, insurance companies among others, and process personal data of citizens for various purposes.
The National Commissioner enjoins data controllers and data processors of major importance who rely on third parties as mediums through which the personal data of the Nigerian populace may be processed to ensure that such third parties are duly registered with the Commission.
“This measure will ensure accountability, strengthen data security architecture and protect Nigeria’s data sovereignty,” Bamigboye stated.