The Nigeria Data Protection Commission (NDPC) has initiated a full-scale investigation into Optasia, operating as Nairtime Nigeria Ltd, due to suspected non-compliant data processing . This inquiry was prompted by discrepancies found during routine oversight of major data controllers and processors.
Alleged Violations
Optasia is accused of utilizing invasive technologies to process personal data for marketing, credit scoring, and financial purposes, sparking grave concerns within the Commission. The investigation will also scrutinize credit scoring activities among financial institutions, telecommunications companies, and insurance providers.
Commission’s Requirements
NDPC National Commissioner, Vincent Olatunji, emphasized that data controllers and processors relying on third-party mediums must ensure registration with the Commission. This measure aims to enhance accountability, fortify data security, and safeguard Nigeria’s data sovereignty.
Registration Requirements
Data controllers and processors of major importance are classified into three categories:
- Major Data Processing-Ultra High Level (MDP-UHL): National commercial banks, telecommunications companies, and insurance companies, with a registration fee of NGN 250,000
- Major Data Processing-Extra High Level (MDP-EHL): Government entities, microfinance banks, and higher education institutions, with a registration fee of NGN 100,000
- Major Data Processing-Ordinary High Level (MDP-OHL): Small and medium-scale enterprises, primary and secondary schools, and primary health care centres, with a registration fee of NGN 10,000
Existing data controllers and processors must register between January 30, 2024, and June 30, 2024, to avoid penalties
Add Comment