NATIONAL IDENTITY MANAGEMENT COMMISSION

PRESS STATEMENT

NIMC ASSURES NIGERIANS OF DATA SECURITY

The National Identity Management Commission (NIMC) received with concern news from some sections of the media pertaining to an alleged breach of citizens' data by a private organization, XpressVerify.

The Commission wishes to state that it offers NIN verification and other services through licensed partners. However, XpressVerify is not one of the Commission's licensed partners.

We express our gratitude to our media partners and the whistleblowers for bringing this to our attention and wish to assure Nigerians and legal residents that there is no data breach of any sort and the Citizens' data is safe and secure in the Nigeria's National identity database.

The Director General and Chief Executive Officer of NIMC, Engr. Abisoye Coker Odusote has promptly ordered a comprehensive investigation into the matter to find out if any of the Commission's Tokenisation verification agents has in any way breach the licensing agreement either directly or through any of their sub-licensees.

Engr Coker-Odusote affirms the commitment of NIMC to data protection and privacy, and assures that no stone will be left unturned in ensuring the safety and security of the data of all enrollees. 'Top-level security is in place to protect the NIN and other personal data of every citizen and legal resident, she said.

NIMC reaffirms its unwavering dedication to safeguarding, securing, and responsibly managing the data entrusted to us. The Commission understands the critical importance of maintaining public trust and confidence in our operations, and we will continue to uphold the highest standards of integrity and accountability.

Signed:
Kayode Adegoke
Head, Corporate Communications
17th March 2024

NDPC

NIGERIA DATA PROTECTION COMMISSION

PRESS RELEASE

NDPC Investigates Alleged Privacy Breach at NIMC

The National Commissioner, Nigeria Data Protection Commission (NDPC), Dr Vincent Olatunji, has ordered a full-scale investigation in respect of allegations of unauthorized access to the personal data of enrollees in the database of National Identity Management Commission (NIMC). This investigation is a further regulatory measure to be taken by NDPC in the wake of public concerns over reports of illegal access to personal data of enrollees by a shadowy entity called XpressVerify.com.

It will be recalled that prior to now, NDPC has been engaging with NIMC on fostering adequacy of data protection. To this end, NDPC held a training with relevant officers of NIMC early February, 2024. This is one in a continuum of measures being put in place by the Federal Government to ensure data privacy and protection.

We note that NIMC has initiated internal investigation and it has immediately given full assurances of co-operation with NDPC to get to the root of the allegation and to review existing mediums through which any entity may lawfully verify the identity of enrollees on its platform. Furthermore, NDPC will work with relevant agencies to audit the trails of the alleged unauthorized data processing and monetization of same, and those who are found culpable for violating the Nigeria Data Protection Act, 2023 will be brought to justice.

The National Commissioner further directed that preliminary findings of the investigation should be made public within seven days.

Babatunde Bamigboye, Esq. CDPRP
Head of Legal, Enforcement and Regulations

Earlier, the Minister of Communications, Innovation & Digital Economy, Bosun Tijani who was called out replied via X, that the NIMC was no longer under his Ministry.

However, Tijani hoped that the NIMC will work with the Nigeria Data Protection Commission to investigate the matter.

NIMC is no longer under @FMCIDENigeria but our @ndpcngr will work with colleagues at @nimc_ng to investigate this immediately. Thanks for sharing.

It can be recalled that the Bola Tinubu-led administration in September 2023 moved the National Identity Management Commission (NIMC) to the Ministry of Interior.

Previous Thread:
https://www.nairaland.com/8032809/xpressverify-access-nigerians-nin-data#128970590

NIMC, always with one problem or the other.

They should not waste tax payers money investigating any nonsense, useless NIN that can't be used to track ordinary kidnappers.

I have to search though my email for the name of another company that sells NIN data.

...and they do not hide it (it's on their website) for employers and premium subscribers.

This is grave and shouldn't be swept under the carpet.

How can the government be careless about such sensitive data of the citizen?

Fij and other whistleblowers should camp on this case

Patch patch country

Ok

Clowns

I beg explain for me... Tinubu Ebi pawa o...no strength to read again

However, XpressVerify is not one of the Commission's licensed partners...Tor una don here

This means there are no technical people who are competent at NIMC.

How did XpressVerify API interface with the national data which suppose to require authentication and authorization before access will be allowed.

Only God knows what they have been able to do with people's data.

Head suppose to roll with NIMC technical drivers and hard questions need to be asked.

Competent hands and robust infrastructure suppose to man sensitive data as such. I am so scared there would have been lot of identity thefts already

Lol... At least una respond

one day, one trouble!

this is a very big shame to NIMC

If we are a serious people and yearning for progressive innovations as a nation the NIN should not be handled with levity as it is the most important data to be secured and guarded by all Nigeria's resources

Seriously I don’t have prblm with all Dix thing but as tinubu is doing this now , someone will just come after 7 years and change to his own personal pattern , just like buari close border , tinubu open it , this means all the suffer common man suffer all Dix year doesn’t yield anything meaningful .

Nimc cannot protect the vast amount of highly sensitive data collected during the NIN enrollment. It is a disaster waiting to happen.

As a cybersecurity professional, I was disturbed through the process of data collection and biometrics enrollment about why they are capturing such data and the lax way it is being collected. There's no information regarding the storage and encryption methods in flight and at rest. Don't get me started on who they provide access or or have unauthorised access.

Laptop brandishing ICT “err-spats” from Lagos doing damage since 1914. The crook in Ministry of Interior must know something about this company. Tinubu’s parapo regime will surely self destruct.

We express our gratitude to our media partners and the whistleblowers for bringing this to our attention and wish to assure Nigerians and legal residents that there is no data breach of any sort and the Citizens' data is safe and secure in the Nigeria's National identity database.

does that mean that NIMC had no idea what was going on with the data it was supposed to be managing?

where are those folks who are always shouting on nairaland that Nigeria needs database?

Investigate wetin dem don create local copies.
Jokers

... FG to investigate FG.

Thieves have been selling our NIN data to the highest bidders;

LibertyRep:
This is grave and shouldn't be swept under the carpet.

How can the government be careless about such sensitive data of the citizen?

Fij and other whistleblowers should camp on this case

who is not supposed to sweep it under the carpet?

if its not swept under the carpet, where will it be swept?

Is that an open check for the company to do anyhow (selling personal information)? Having partnership with government agency even makes them more committed and entails greater responsibility in the area of secured access to peoples information. They are custodians. A position of trust.
It is a trust that demands accountability, not just to NIMC but to Nigerians as a whole.
This occurrence could be likened to a BDC obtaining license and then using that privilege to engage in other financial crimes.

Too many greedy and wicked Nigerians. Imagine an organization having sensitive citizens' data just as organizations in US, someone will compromise, sell your home address to kidnappers or hired assassins for profit, and nothing will be done about it. It baffles me as to how a country can be so lawless. Few days ago, we had a news of how the customs intercepted container loads of arms. That's about everything you'll ever hear, but the truth is, why can't make move to fight wrong doings in Nigeria?

yeye pipu

What do u expect from a govt of yahoo boys and a drug kingpin ?