The Nigeria Data Protection Commission, NDPC, has commenced an investigation into a suspected data breach at the Corporate Affairs Commission, CAC, in line with its mandate under the Nigeria Data Protection Act, 2023.
The move highlights the Commission’s commitment to safeguarding personal data and sustaining public confidence in the integrity of critical government digital systems.
In a statement, the NDPC’s Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, raised concerns over the growing sophistication of cyber threats.
He noted that cybercriminals now deploy advanced techniques capable of infiltrating systems and extracting large volumes of data, often across interconnected platforms.
He emphasised the need for organisations to remain vigilant and strengthen their cybersecurity frameworks.
In response, the National Commissioner and Chief Executive Officer of the NDPC, Dr Vincent Olatunji, has directed a team of experts to collaborate with relevant stakeholders to reinforce data protection measures.
The intervention will include a comprehensive review of access control mechanisms, risk assessment protocols, and system vulnerability testing.
Additionally, the Commission will evaluate compliance levels among third-party data processors through rigorous due diligence, including Vulnerability Assessment and Penetration Testing, VAPT.
While reassuring the public, the NDPC maintained that Nigeria’s data protection architecture remains robust, noting that ongoing efforts are aimed at enhancing data security, preserving public trust, and supporting the continued growth of the nation’s digital economy.
