Connect with us

E-Business

Data Privacy Day: Celebrating Citizen’s Right to Privacy And Protection in Nigeria

Published

on

Kindly share this post

By Mubarak Umar

2022 marks the third year in which Nigeria will be joining the international community to celebrate the World Data Privacy Day – an international event that occurs on January 28th of every year.

The purpose of Data Privacy Day is to raise awareness, promote privacy and data protection best practices. It is currently observed in the United States of America, Canada, and over 40 European countries since 2007. The international celebration offers opportunities for collaboration among governments, industries, academia, nonprofit organizations, privacy professionals, educators, etc.

As a global event, Data Privacy Day encourages: compliance with Data Privacy laws and regulations; dialogues among stakeholders interested in advancing data protection and privacy and provides a robust platform for global networking and local action on mutually cherished principles of data privacy.

The initiative that was initially on raising awareness to protect information of government and private sectors’ business transactions, expanded over the years to include families, consumers and all online activities as a result of revolution brought by digital devices.Of a truth, a vast majority of our people are generally unfamiliar with the risks involved in data processing. In the same vein, they are hardly aware of what they can do if they consider that their rights have been breached.

There are approximately 108.75 million internet users in Nigeria and the figure is projected to grow to 143.26 million by 2026. According to Statista, a leading provider of market and consumer data, internet penetration stood at 51.44% of the country’s population in 2021, and will likely reach 59.92 percent by the year 2026.

The appointment of Professor Isa Ali Ibrahim Pantami, (now Minister of Communications and Digital Economy) as the Director General, National Information Technology Development Agency (NITDA), marked a turning point in the history of data privacy in Nigeria. Under his leadership, NITDA issued the Nigeria Data Protection Regulation (NDPR) 2019. It applies to both the public and the private organizations as they process personal data of Nigerian citizens and Nigerian residents anywhere in the world.

The Regulation is aimed at protecting the right to privacy, creating the right environment for digital transactions, job creation and improving information management practices in the country.

Working in concert with the Federal Ministry of Communications and Digital Economy, NITDA has sustained the momentum of data privacy protection in Nigeria. For instance, from approximately 600 organizations filing privacy audit report in 2020, Nigeria now has at least 1230 organizations in 2021.

The incumbent Director General of NITDA, Kashifu Inuwa, CCIE, memorably shared Nigeria’s strides in the international community thus: “in less than 2 years of active implementation of NDPR in Nigeria, we were admitted to the Common Thread Network (a Network of Data Protection Authorities of Commonwealth countries).

We also got admitted as a full member of the Network of African Data Protection Authorities (NADPA). Our contribution at the Africa Union’s Policy and Regulatory Initiative for Digital Africa (PRIDA) Data Protection Laws’ Harmonization Work Group led to Nigeria being considered for inclusion in the list of countries where a developed framework for data laws harmonization was tested.”

The impact of NDPR on job and wealth creation is also remarkable. 7,680 jobs were created, and 5,746 Nigerians were trained on Nigeria Data Protection Regulation (NDPR) in 2021.

The sector is currently valued at N4,080,000,000, using median value of audit implementation cost, according to the Director General of NITDA, Kashifu Inuwa, CCIE.

Before the introduction of the NDPR, no Nigerian entity could boast of full compliance with data protection laws.

A handful of multinationals had some level of compliance imposed on them by their parent companies. The narrative changed drastically within one year. From zero compliance in 2018 Nigeria now has over 1230 organizations filing NDPR Compliance.

The place of NDPR in human rights jurisprudence have been litigated in our courts. Gladly, our courts, as the bastion of justice, have established a binding precedent to the effect that NDPR is rooted in the section 37 of the 1999 Constitution. The section provides thus: The privacy of citizens, their homes, correspondence, telephone conversations and telegraphic communications is hereby guaranteed and protected.

The implication of this is that no data controller or data processor can wish away the NDPR. See the case of Incorporated Trustees of Digital Lawyers Initiative &Ors. V. National Identity Management Commission (NIMC) CA/ IB/291/2020.

It is believed that the future of work will be fundamentally different when digital machines are deployed in virtually everything that we do. Soon, the new machines: Artificial Intelligence and Robotics will be a platform of innovation in Nigeria, especially in instrumenting, automating, tracking, and analyzing the core operations of businesses.

While exploring and utilizing these digital economy potentials, NITDA is always proactive in creating awareness on how Nigerians can protect their personal information.   It is only when customers trust their activities online that digital economy will thrive.

To deter breach of data privacy, NDPR provides that: “Any person subject to the Regulation who is found to be in breach of the data privacy rights of any Data Subject shall be liable, in addition to any other criminal liability, to the following: a) in the case of a Data Controller dealing with more than 10,000 Data Subjects, payment of the fine of 2% of Annual Gross Revenue of the preceding year or payment of the sum of 10 million Naira, whichever is greater; b) in the case of a Data Controller dealing with less than 10,000 Data Subjects, payment of the fine of 1% of the Annual Gross Revenue of the preceding year or payment of the sum of 2 million Naira, whichever is greater.

This clearly shows that NITDA, acting as Nigeria’s data regulatory body, is committed to protecting citizens’ data to ensure that Nigerian businesses remain competitive locally and internationally.

Nigeria is the only country in Africa that dedicates a full week 24th – 28th January of every year to raise awareness on data protection with series of programmes, both physically and virtually.

NITDA is playing its role in the best possible way to attract investment, open more digital job opportunities for Nigeria’s teeming population and support the security architecture by effectively implementing its mandate of protecting peoples’ data.

The implication of the foregoing is that Nigeria with over 200 million citizens can tackle any prejudice or misgivings about digitization through a potent regulatory instrument on data privacy. The resulting effect is momentum for a sustainable digital economy.

This momentum will invariable create jobs for essential public services. It is however important for Nigerians to take ownership of the legal regulatory framework on data privacy with a view to sustaining the present administration’s effort in building an inclusive and sustainable digital economy.

Mubarak Umar works with NITDA, Abuja


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

FG Plans to Make 95 Percent of Nigerians Digitally Literate by 2030

Published

on

Kindly share this post

Federal government has announced its plans to achieve 95 per cent digital literacy among Nigerians by 2030, with a specific target of training and empowering at least 30 million citizens by 2027.

FG Plans to Make 95 Percent of Nigerians Digitally Literate by 2030

The announcement was made on Thursday at the grand finale of the Digital for All Challenge 2.0, an initiative of Tech4Dev funded by the UK Government’s Digital Access Programme and implemented in partnership with the National Information Technology Development Agency (NITDA).

Kashifu Abdullahi, director-general, NITDA, represented by Aristotle Onumo, director of Stakeholder Management at the agency, said that over 30 million Nigerians, particularly in rural areas, are being targeted for training, with digital champions deployed nationwide to facilitate the programme.

“We are integrating digital literacy into school curricula nationwide, from primary to university level, and partnering with the Head of Civil Service to make digital skills a requirement for civil service progression,” Onumo said.

He added that NITDA aims to achieve 70 percent digital literacy by 2027 as a foundation for reaching 95 percent by 2030.

Onumo called on stakeholders to work together, stressing that digital literacy is for everyone — the young, the old, the employed, job seekers, traders, civil servants, and others.

In her welcome remarks, Mrs. Oladiwura Oladepo, Co-Founder of Tech4Dev, described the initiative as a national movement to deepen digital knowledge and inclusion across all levels of society.

She noted that the programme has already impacted over one million Nigerians drawn from all six geopolitical zones.

Oladepo said the Digital for All Challenge 2.0 is not just a competition but a movement to unlock opportunities and close the digital divide for individuals, families, and the nation.

Representing the British High Commission, Mr. Idongesit Udo, Digital Access Programme Adviser, praised the initiative for creating opportunities for young Nigerians to compete globally, enabling civil servants to deliver better services, and helping children begin their digital journey early.

He highlighted the UK’s broader partnership with Nigeria, which includes initiatives in cybersecurity (Africa Cyber Programme), standardization (British Standards Institute), and entrepreneurship (UK-Nigeria Tech Hub), all aimed at fostering a thriving digital economy.

At the event, participants from all six geopolitical zones competed in various categories.

The first prize winner, Miracle Michael, received N15 million. The second prize went to Chinedu Arisa, who received N12.5 million, while Ismail Adam and Uluchi Chibueze received N10 million and N7.5 million respectively.

Nkeiruka Onyejeocha, minister of State for Labour and Employment, who presented the awards, commended the initiative for equipping Nigerian youth with future-ready skills.

She emphasised that digital literacy is vital not only for job creation but also for national development, and encouraged more young people to take part in programmes of this nature.

 

 

 

 


Kindly share this post
Continue Reading

E-Business

NDPC Raises Alarm on Chrome Vulnerabilities, Urges Nigerians to Secure Devices

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC) has issued an urgent security advisory, warning Nigerians of critical vulnerabilities in Google Chrome that could expose users to severe cyber threats.

NDPC Raises Alarm on Chrome Vulnerabilities, Urges Nigerians to Secure Devices

The alert, posted on the Commission’s official X handle, underscores the risks of these flaws and calls for immediate action to safeguard personal devices and data.

According to the NDPC, the vulnerabilities could allow attackers to execute arbitrary code on a user’s system, potentially granting unauthorised access to computers.

This could enable cybercriminals to install malicious programs, view, alter, or delete sensitive data, and even create new user accounts with full administrative rights.

Such breaches could disrupt device functionality, compromise personal information, and lead to significant loss of control over affected systems.

“Multiple vulnerabilities have been discovered in Google Chrome. The most severe of these could allow an attacker to take over a user’s system,” the NDPC stated, emphasising the urgency of addressing the issue.

To mitigate these risks, the Commission has advised Chrome users to apply the latest browser updates immediately.

It also recommends operating devices with standard user rights instead of administrative privileges to limit potential damage. Additionally, the NDPC urged Nigerians to exercise caution by avoiding suspicious links, unsolicited attachments, and untrusted websites.

The advisory comes as part of Nigeria’s broader efforts to strengthen data protection.

 


Kindly share this post
Continue Reading

E-Business

Microsoft Seizes 340 Websites Linked to Nigerian-based Phishing Subscription Service

Published

on

Kindly share this post

Microsoft said on Tuesday that it seized nearly 340 websites tied to a rapidly growing Nigerian-based service that allowed users to carry out phishing operations that stole at least 5,000 Microsoft user credentials.

Microsoft obtained an order from the U.S. District Court in Manhattan earlier this month to seize domains associated with Raccoon0365, the subscription service that allowed users to carry out massive phishing campaigns, which sometimes involved thousands of emails at a time, according to Steven Masada, assistant general counsel for Microsoft’s Digital Crimes Unit.

Raccoon0365’s service, which operates through a private Telegram channel with more than 850 subscribers, enables users to impersonate trusted brands and get targets to enter Microsoft login credentials on phony Microsoft login pages, Masada said in a blog posted on Microsoft’s website.

The service has generated for its small group of operators at least $100,000 in cryptocurrency payments since launching in July 2024, Masada said in the blog. Microsoft said the seizure of the websites occurred over a period of days earlier this month.

Microsoft identified Nigeria-based Joshua Ogundipe as the leader and main operator of Raccoon0365.

Ogundipe did not immediately respond to an email request for comment sent to the email address identified by Microsoft in its court filing.

“Cybercriminals don’t need to be sophisticated to cause widespread harm,” Masada said. “Simple tools like Raccoon0365 make cybercrime accessible to virtually anyone, putting millions of users at risk.”

Raccoon0365 subscribers have targeted a wide swath of industries, Masada said, and separate court filings allege that “a significant portion” of Raccoon0365 activity targets organizations based in New York City.

Masada said Microsoft identified what it said was a Raccoon0365-related effort using tax-themed phishing emails to target more than 2,300 organizations, mostly in the U.S., between February 12 and February 28 this year, according to a company blog posted in April.

Errol Weiss, chief security officer of the Health Information Sharing & Analysis Center (Health-ISAC), which provides cybersecurity services to member health organizations and is a co-plaintiff alongside Microsoft, said Raccoon0365 has been linked to successful credential harvesting through phishing campaigns at at least five unnamed healthcare organizations, while targeting 25 health sector organizations overall. Once hackers gain that access, any number of things can happen, Weiss said.

“So many of the attacks start because somebody gave up their user name and password to a bad guy,” Weiss said in an interview. “Once that cybercriminal has access to the network, then it’s just up to the imagination in terms of what comes next and how they monetize it.”

The Raccoon0365 operators used services provided by Cloudflare to help hide the service’s backend infrastructure, the internet services firm said in its own blog post. Cloudflare worked with Microsoft and the U.S. Secret Service to disrupt Raccoon0365 operations on its platform and prevent the operators from establishing new accounts, the company said.

Blake Darché, the head of threat intelligence at Cloudflare, said in an interview that the Raccoon0365 operators made some key operational security mistakes but were highly effective.

“They’re in people’s accounts, they compromise lots of people, and it needs to obviously be stopped,” he said.

 


Kindly share this post
Continue Reading

Trending