By 
The Nigeria Data Protection Commission (NDPC) has initiated a comprehensive investigation into the data processing practices of Optasia, operating in Nigeria as Nairtime Nigeria Ltd. The probe follows concerns over potential non-compliance with Nigerian data protection regulations, as detected during routine regulatory oversight of key data controllers and processors.
RELATED: Fidelity Bank fined N555.8m by NDPC for data protection violations
Dr. Vincent Olatunji, National Commissioner and CEO of the NDPC, ordered the investigation, citing suspicious patterns in Optasia’s data handling, particularly in its use of privacy-invading technologies for marketing, credit scoring, and financial solutions. The Commission’s Head of Legal, Enforcement & Regulations, B.B. Bamigboye, expressed serious concerns about how the company processes personal data for these purposes, potentially infringing on the privacy of Nigerian citizens.
The investigation extends to the credit scoring activities of financial institutions, telecoms companies, and insurance firms, scrutinizing how these entities handle personal data for a variety of functions. This probe is part of a broader effort by the NDPC to ensure that data controllers and processors comply with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation 2019.
In a previous case, the NDPC fined Fidelity Bank PLC over N555 million for breaches of data protection laws. Earlier this year, the Commission also investigated MTN’s MoMo Payment Service Bank (PSB) for alleged data privacy violations and expanded its inquiry to include approximately 150 other organizations.
The National Commissioner has called on major data controllers and processors, particularly those relying on third-party service providers, to ensure that these third parties are duly registered with the NDPC. This move aims to bolster accountability, enhance data security, and safeguard Nigeria’s data sovereignty.
By intensifying its regulatory efforts, the NDPC is reaffirming its commitment to protecting the privacy of Nigerian citizens and ensuring strict compliance with data protection laws across all sectors.
