UNILAG, Lotus Bank Under Investigation for Data Violations — Is Your Personal Data Safe?

In a development that should concern every Nigerian with a bank account, a phone number, or a university degree, the Nigeria Data Protection Commission (NDPC) has launched a forensic investigation into three major organizations for allegedly violating Nigeria's data protection laws. The targets? The University of Lagos (UNILAG), Lotus Bank, and Hackerbella Ltd. The NDPC's Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, disclosed this in a statement from Abuja, confirming that formal investigations are now underway. This isn't a warning. This isn't a "we're watching you" letter. This is a forensic investigation — the most serious type of inquiry the NDPC can conduct. It means they believe there is evidence of actual data protection violations serious enough to warrant deep examination. For millions of Nigerians who have entrusted their personal information to banks, universities, and tech companies, this is a wake-up call.   What Exactly Is the NDPC Investigating? While the NDPC has not disclosed all the specific details of the alleged violations, forensic investigations typically involve examining how organizations collect, store, process, share, and protect personal data. Under the Nigeria Data Protection Act (NDPA) 2023, organizations must: Obtain clear consent before collecting personal data Use data only for the purposes disclosed to the data subject Implement adequate security measures to protect data Not share data with third parties without consent Allow individuals to access, correct, or delete their data Any violation of these requirements can trigger NDPC action. The fact that a university, a bank, and a tech company are all under investigation suggests that the problem is widespread across sectors.   Why This Matters to YOU Think about how much personal data you've given away in Nigeria: Your bank has your BVN, NIN, phone number, home address, date of birth, photograph, next-of-kin details, and financial transaction history Your university has your JAMB score, academic records, parents' information, state of origin, and sometimes medical records Every app you've downloaded has your phone number, email, location data, and browsing habits Every website you've registered on has your name, email, and often much more Now imagine that data being mishandled. Shared without your consent. Sold to marketers. Exposed to hackers. Used for fraud. That's not hypothetical. It happens every day in Nigeria. Those random calls offering you loans you never applied for? Someone sold your data. Those text messages from companies you've never heard of? Someone shared your number. Those emails that know your name and bank? Someone's data protection failed.   The UNILAG Question UNILAG is one of Nigeria's most prestigious universities. Thousands of students, staff, and alumni have entrusted the institution with sensitive personal information over decades. If UNILAG's data protection practices are found to be inadequate, it rais