The Nigeria Data Protection Commission (NDPC) has commenced a forensic investigation into the University of Lagos (UNILAG), Lotus Bank and Hackerbella Limited over allegations that students’ personal data were used to open bank accounts without a lawful basis.The commission disclosed the investigation in a statement signed by its Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, following public complaints concerning the handling and use of students’ personal information.
The investigation centres on UNILAG’s Smart Identification Card initiative, which was developed through a partnership involving the university, Lotus Bank and Hackerbella. The project was launched in February 2026 as part of the university’s digital transformation programme.
Earlier reporting by the Foundation for Investigative Journalism found that UNILAG collected personal information from students and staff for the smart ID project, with the process involving the opening of bank accounts with Lotus Bank. The report raised questions about whether adequate consent and data-protection safeguards were followed.
The NDPC said its forensic probe will examine the circumstances surrounding the collection and processing of the students’ data, the legal basis for the processing and whether the organisations involved complied with their obligations under Nigeria’s data-protection framework.
The commission’s investigation comes amid growing scrutiny of how educational institutions and financial technology providers collect, share and use personal information. The NDPC has previously investigated alleged data breaches involving financial institutions and payment platforms, including Remita and Sterling Bank.
The commission is expected to establish whether any violations occurred and determine the appropriate regulatory action based on its findings. Until the investigation is concluded, the allegations against UNILAG, Lotus Bank and Hackerbella remain subject to regulatory determination.
Post a Comment