Data commission investigates alleged data breach at CAC
The Nigeria Data Protection Commission (NDPC) has commenced an investigation into allegations of a data breach at the Corporate Affairs Commission (CAC). The Commission said the probe is being carried
The Nigeria Data Protection Commission (NDPC) has commenced an investigation into allegations of a data breach at the Corporate Affairs Commission (CAC).
The Commission said the probe is being carried out in line with Section 46(3) of the Nigeria Data Protection Act, 2023.
In a statement signed by its Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, the NDPC said the move aims to strengthen trust in Nigeria’s digital and economic systems.
Advertisement
300x250
The agency noted that increasing cyber threats have heightened concerns about the security of critical national databases, particularly those linked across multiple platforms.
It added that modern cyberattacks often involve large-scale data compromise and unauthorised access across interconnected systems, necessitating stronger safeguards and continuous monitoring.
The Commission assured that the investigation will help determine the extent of any breach and guide appropriate regulatory action.
"As part of a continuum of regulatory support measures, the National Commissioner/CEO of the NDPC, Dr Vincent Olutunji, has directed the Commission’s technical team to immediately interface with relevant authorities and pivotal organisations, with a view to reinforcing existing guardrails for the processing of personal data.
"The investigation of the instant case will, inter alia, cover the procedures and outcomes of Access Control Mechanisms, Data Privacy Impact Assessments, Vulnerability Assessment and Penetration Testing (VAPT), as well as due diligence on third-party data processors.
"The NDPC assures members of the general public that frameworks for data protection, in terms of technology and other requisite resources in Nigeria, remain fundamentally strong. This is evident in the increasing rate of access to data-driven services.
"The ongoing efforts of the NDPC are necessary regulatory actions geared towards sustaining public trust in these services and bolstering continuous investment in Nigeria’s digital economy."
