RECENT DEVELOPMENT IN AFRICA DATA PROTECTION SPACE

Nigeria Data Protection Commission (NDPC) investigates Optasia’s data processing activities

The NDPC is investigating Optasia, a leading Fintech services provider, following concerns about non-compliant data processing practices. The investigation primarily focuses on Optasia’s utilization of privacy-invasive technologies for marketing, credit scoring, and other financial services, which pose potential privacy risks. The NDPC emphasized the significance of data controllers and processors ensuring that their third-party partners are duly registered with the Commission to uphold data security and safeguard Nigeria’s data sovereignty. The company deployed privacy-invading technologies to process personal data for marketing, credit scoring, and other financial services. This was discovered during routine regulatory oversight of data controllers and data processors of major importance. All data controllers and processors of significant importance who rely on subprocessors are required to be registered with the NDPC per Nigerian law.