Paradigm Initiative, a digital rights advocacy group, has taken legal action against the National Identity Management Commission (NIMC), accusing it of failing to protect the personal data of Nigerians.
During a press conference in Lagos on Wednesday, the group’s Executive Director, Gbenga Sesan, announced the lawsuit, which was filed at the Federal High Court in Abuja in October. The case is set for hearing on January 22, 2025.
“We filed the case in October. They now have the opportunity to prove to Nigerians whether a data breach occurred or not,” Sesan stated.
Allegations of Data Vulnerabilities
The lawsuit follows reports earlier this year alleging that sensitive data belonging to millions of Nigerians was being sold online. Although NIMC publicly denied the claims, Paradigm Initiative’s independent investigations uncovered ongoing vulnerabilities in the commission’s systems months later.
“There were claims that data belonging to millions of Nigerians was being sold on the dark web. This raised concerns because the figures exceeded Nigeria’s population, suggesting massive duplication or unauthorised access to sensitive information across multiple platforms,” Sesan explained.
He added that, despite NIMC’s assurances in April that the breach had been resolved, the advocacy group discovered in June that Nigerians’ data was still being sold through a different platform.
“This discovery highlights a failure to address the root cause of the issue,” Sesan said.
Exposing the Breach
To demonstrate the seriousness of the issue, Paradigm Initiative purchased personal data belonging to senior government officials, including the Minister of Communications and Digital Economy and the Director General of NIMC.
“This wasn’t an easy decision, but it was necessary to get the attention of authorities who have failed to act on previous reports. If they won’t protect the data of ordinary Nigerians, maybe they’ll care when it’s their own data being sold,” Sesan revealed.
Also Read
- NIMC Warns of Fraudulent Websites Harvesting Nigerians’ Data
- After Public Outcry, NIMC Denies Dollar Charges for NIN Modifications
NIMC’s Response
NIMC has repeatedly denied the allegations of data breaches, maintaining that its systems are secure. However, the lawsuit aims to hold the commission accountable and push for improvements in data protection.
Paradigm Initiative’s legal action highlights the growing concerns over digital security and the need for better safeguards to protect Nigerians’ sensitive information.
Call for Accountability
The group emphasized that the case is not just about exposing vulnerabilities but also about demanding accountability and ensuring the implementation of stronger data protection measures in Nigeria.
“We cannot sit back and allow such negligence to continue. Nigerians deserve to know their data is safe,” Sesan concluded.
The outcome of the case could have significant implications for data security policies and practices in Nigeria, especially as the country continues to digitize its public and private sectors.