NIMC, CBN, Others Sued Over Alleged Digital Rights Breaches
Paradigm Initiative, a prominent digital rights advocacy organization, has filed a lawsuit against several Nigerian government agencies, including the National Identity Management Commission (NIMC), the Central Bank of Nigeria (CBN), and others, alleging serious violations of citizens’ digital rights and data protection failures.
The legal action follows a data breach that reportedly impacted 43 million Nigerians, where personal information such as National Identity Numbers (NINs), phone numbers, home addresses, and passport details were illegally accessed and sold to third parties. This breach, first revealed in April 2024, allegedly involved hackers gaining unauthorized access to national databases. Paradigm Initiative has claimed that the breach highlights systemic negligence on the part of these agencies, particularly in their handling of sensitive citizens’ data.
Gbenga Sesan, the Executive Director of Paradigm Initiative, explained that the organization had obtained the personal data of senior government officials, including the Minister of Communications and Digital Economy, as evidence of the breach to push for legal action. In his remarks, Sesan pointed out that despite NIMC’s repeated denials, contradictions in government responses—such as the Minister calling for an investigation and the Data Protection Commission acknowledging fines—suggested that the data was indeed leaked.
Paradigm Initiative’s lawsuit, filed in October 2024, seeks to achieve three key objectives:
- Prove that a data breach occurred.
- Invoke the Nigeria Data Protection Act to ensure accountability.
- Impose sanctions on the responsible parties.
The case is scheduled for hearing in January 2025. Sesan also raised concerns about the Nigeria Data Protection Commission (NDPC), noting its lack of funding, with a budget of zero Naira in 2024. This has impeded the Commission’s ability to effectively enforce data protection laws in the country.
The breach has wider implications for national security, as it undermines the reliability of government systems designed to protect sensitive information. Sesan stressed the importance of oversight in the use of third-party vendors managing national data, given the government’s promise of enhanced security when Nigerians were forced to register for NINs during the COVID-19 pandemic.
The lawsuit aims to address these systemic issues and demand accountability from the agencies tasked with safeguarding citizens’ data. Paradigm Initiative believes the court proceedings could set a landmark precedent for data protection in Nigeria, advocating for greater transparency and a higher level of accountability to protect the digital rights of all Nigerians.
Additionally, Nnena Paul-Ugochukwu, Chief Operating Officer of Paradigm Initiative, spoke about the broader digital rights challenges facing Africa, including data privacy violations, censorship, and digital governance gaps. She emphasized Paradigm Initiative’s work in promoting internet freedom and digital inclusion across the continent. The organization has impacted over 150,350 underserved African youth and has worked with stakeholders in several countries to address gaps in digital governance.
Looking ahead, Paradigm Initiative plans to expand its efforts in 2025, aiming to build a digitally inclusive world where technology respects human rights and fosters societal growth.
