The Corporate Affairs Commission (CAC) is currently under investigation by the Nigeria Data Protection Commission (NDPC). Threat actors in the digital space have devised malicious methods of compromising the data security architecture of key databases.
A statement from the NDPC stated that there are large-scale data exfiltration and cross-platform compromise across interconnected systems, adding that the investigation of the instant case will, inter alia, cover the procedures and outcomes of access control mechanisms, data privacy impact assessments, vulnerability assessment and penetration testing (VAPT), as well as due diligence on third-party data processors.
According to the National Commissioner/CEO of the NDPC, Dr Vincent Olutunji, the Commission’s technical team has been directly tasked with immediately interfacing with relevant authorities and pivotal organisations, with a view to reinforcing existing guardrails for the processing of personal data.
He assured members of the general public that frameworks for data protection, in terms of technology and other requisite resources in Nigeria, remain fundamentally strong. This is evident in the increasing rate of access to data-driven services.
The ongoing efforts of the NDPC are necessary regulatory actions geared towards sustaining public trust in these services and bolstering continuous investment in Nigeria’s digital economy.

