By 
The Nigerian government is investigating Philips Consulting and the United Bank for Africa (UBA) PLC for allegedly violating Article 4 of the Nigeria Data Protection Regulations (NDPR), the country’s principal legislation on data privacy.
Article 4 of the NDPR imposed obligations in respect of ‘Handling Personal Data’ of data subjects (individuals) by data controllers which include organisations such as the UBA and Philips Consulting.
RELATED: Wema Bank, Bet Naija face fines above N10M and hefty sanctions over privacy breaches
According to privacy ombudsman, Nigeria Data Protection Bureau (NDPB), a forensic investigation is being carried out based on “the complaint against Philips Consulting in connection with the activities of online lending platforms who willfully breach the privacy of citizens whilst the investigation of UBA PLC pertains to allegations of infringement on the governing principles of data protection.”
A statement issued by the Bureau on Monday in Abuja notes in part, “Following complaints of violation of the Nigeria Data Protection Regulation against Philips Consulting and United Bank for Africa PLC, the Nigeria Data Protection Bureau National Commissioner, Dr. Vincent Olatunji, has ordered a forensic investigation in line with Article 4 of the NDPR.
“The Bureau further warned all data controllers and processors to refrain from all forms of data processing that were detrimental to citizens, the economy, and security of Nigeria.”
NDPB’s NC/CEO, Olatunji
In June, the data watchdog commenced investigations into reports of breach of data privacy involving Wema Bank PLC and KC Gaming Networks (Bet Naija) as part of initiatives to sanitize privacy lapses in corporate Nigeria.
The statement signed by its Legal, Enforcement & Regulations Lead, Babatunde B. Bamigboye adds:
“The NDPR mandates organizations to carry out due diligence before engaging in any data processing. This is to ensure that parties are accountable for any infringement on fundamental rights and freedoms of data subjects.
“The Bureau warns all data controllers and processors to eschew all forms of data processing that are detrimental to citizens as well as the economy and security of the country.”
