NDPC probes alleged data breach @Corporate Affairs Commission - ITREALMS

ITREALMS ... making leadership SENSE with digital news!

The Nigeria Data Protection Commission (NDPC) has officially initiated an investigation into a reported data breach at the Corporate Affairs Commission (CAC), reports ITREALMS.

The probe, launched pursuant to Section 46(3) of the Nigeria Data Protection Act, 2023, underscores an irreducible commitment to fostering trust within Nigeria’s economic environment as the Commission performs an unblinking recording of increasingly sophisticated threats in the digital theater.

The NDPC noted with concern that threat actors have devised malicious methods of compromising the data security architecture of key national databases through architectural gaps involving large-scale data exfiltration and cross-platform compromise across interconnected systems, threatening the privacy of millions of registered entities.

As part of a continuum of regulatory support measures, the National Commissioner/CEO of the NDPC, Dr. Vincent Olatunji, has directed a technical team to provide instant sunlight on the incident by interfacing with relevant authorities to reinforce existing guardrails for the processing of personal data across the country's coordinated national framework.

This investigation is designed to strip away any hiding places for technical negligence and, according to a statement signed by Babatunde Bamigboye, Esq., Head of Legal, Enforcement & Regulations, the probe will comprehensively cover access control mechanisms to review who has the mandate to access sensitive business data, data privacy impact assessments to interrogate the depth of risk management protocols, and vulnerability assessment and penetration testing to identify if the gates of the digital economy are properly secured.

Furthermore, the Commission will conduct due diligence on third-party data processors to ensure they meet the moral and legal standards of the NDP Act 2023. Despite the breach, the NDPC assured the general public that Nigeria's data protection frameworks remain fundamentally strong, citing the increasing rate of access to data-driven services as evidence of resilience.

ALSO READ:
Privacy breach: NDPC cracks down on content creators over unauthorized street filming - ITREALMS

FG worried over cybersecurity gaps: NDPC probes payment ecosystem breach - ITREALMS Online

This regulatory action is a standard prerequisite for sustaining public trust and bolstering continuous investment in Nigeria’s digital economy by ensuring that the digital identity of Nigerian businesses remains a symbol of trust rather than a vulnerability in the global digital space.

Chuks Egbune/Editor

Short URLs: goo.gl, mcaf.ee, cli.gs