Firm Sues NIMC, Others On Digital Rights Breach Allegations

A digital rights advocacy organisation, Paradigm Initiative has taken legal action against the National Identity Management Commission (NIMC), Central Bank of Nigeria (CBN) and other government agencies, alleging systemic violations of citizens’ digital rights, including failures in data protection and inclusivity.

This is even as it revealed the scale of an alleged data breach affecting 43 million Nigerians.

The executive director, Paradigm Initiative, Gbenga Sesan, at the end of year media briefing, on Wednesday, in Lagos, said Paradigm Initiative is taking this step, following allegations that surfaced in April 2024 about hackers gaining unauthorised access to national databases, claiming that personal data—including National Identity Numbers (NINs), home addresses, phone numbers, and passport details—was illegally accessed and sold.

According to Sesan, this breach potentially affects up to 43 million Nigerians. “When the data of ordinary Nigerians is breached, nobody does anything. To draw attention to the issue, Paradigm Initiative purchased the personal data of senior government officials, including the Minister of Communications and Digital Economy, and used it as evidence to push for legal action,” he stated.

“To this end, Paradigm Initiative has filed a lawsuit against NIMC and several other agencies, including the Central Bank of Nigeria, Nigeria Immigration Service, and the Federal Inland Revenue Service, accusing them of failing to protect citizens’ data.

“The case, filed in the Abuja Judicial Division in October 2024, aims to establish three key objectives: Prove that a data leak occurred; Invoke the powers of the Nigeria Data Protection Act and ensure accountability and sanctions for responsible parties. January 2025 has been scheduled for hearing,” Sesan revealed.

Sesan highlighted the government’s alleged negligence, particularly NIMC’s repeated denial of any breach.

“They called me a liar on national TV,” Sesan remarked. “But if data wasn’t leaked, why did the Minister call for an investigation? Why did the Data Protection Commission acknowledge a fine? These contradictions need answers.”

He also criticized the lack of independence and funding for the Nigeria Data Protection Commission (NDPC). “In 2024, the NDPC operated with a budget of zero Naira,” Sesan revealed, underscoring systemic issues in the enforcement of data protection laws.

The data breach has broader implications for national security, as it raises questions about the reliability of government systems meant to protect sensitive information. Sesan expressed concern about the use of third-party vendors in managing national data, emphasizing the need for stricter oversight. “The government forced Nigerians to stand in queues during the COVID-19 pandemic to register for NINs, promising that it would enhance security,” Sesan said. “Now, the same data meant to protect us is being mishandled and sold. This negligence is unacceptable.”

The lawsuit seeks to address these issues comprehensively, calling for greater accountability from agencies entrusted with citizens’ data, said Sesan, challenging the government to clarify discrepancies in its handling of the breach and ensure that ordinary Nigerians are not left vulnerable to exploitation. “The court proceedings could set a landmark precedent for data protection in Nigeria, I urge citizens to demand greater transparency and accountability from those in power. This fight isn’t just about senior officials. It’s about protecting every Nigeria’s fundamental right to privacy,” he added.

In her opening remarks, the chief operating officer, Paradigm Initiative, Nnena Paul-Ugochukwu, said: “Africa is at the forefront of a global digital revolution, bringing unprecedented opportunities in education, health, business, and governance. However, Ugochukwu highlighted significant challenges, including the widening digital gap, data privacy violations, censorship, and poor digital governance. While technology has enhanced our lives, these challenges hinder economic growth, social progress, and the fundamental rights of citizens,”

The COO also pointed to the disturbing trends of internet shutdowns, digital surveillance, and algorithmic biases, which threaten freedom of expression and disproportionately affect underserved communities.

To tackle these issues, she said, Paradigm Initiative, a pan-African nonprofit, has been at the forefront of promoting internet freedom and digital inclusion for over 15 years. “With a presence in six African countries and programs spanning 27 nations, Paradigm Initiative has directly impacted more than 150,350 underserved African youth, providing digital opportunities and protecting online rights,” she added.