Authority: Nigeria Data Protection Bureau
Jurisdiction: Nigeria
Relevant law: Section 37 of the Constitution, Articles 2.1(2)-(3), 2.6 and Article 4 of the Nigeria Data Protection Regulation (NDPR) 2019.
Type: Violation
Outcome: Pending/Resolved
Started: May, 2022
Decided: N/A
Published: 9 June 2022
Fine: N/A
Parties: Wema Bank PLC
Case No./Parties: N/A
Appeal: N/A
Original Source: NDPC
Original contributor: Isaac Vincent

Contents

  1. Summary
    1. Facts
    2. Holding
  2. Comment
  3. Further resources
  4. Decision

Summary

A Bank (Wema Bank PLC) is accused of breaching privacy laws by opening accounts without the complainant’s consent.

Facts

The Nigeria Data Protection Bureau (NDPB), commenced an investigation into reports of breaches involving customers’ data in Wema Bank PLC customers.

The bank is accused of opening accounts for customers without their request or authorisation.

The investigation follows complaints from people who received messages indicating accounts had been opened for them at Wema Bank without their permission.

The Regulator indicated that the objectives of the investigations is to determine the impact of the violation on the affected data subjects and the remedial actions taken by the data controller.

Holding

Unconfirmed reports indicate that the matter was resolved privately with the institution.

Comment

The decision is not available but a press release by the Bureau and a release is provided below.

Further resources

Government probes data breach in bank, betting firm

Decision