{"id":88427,"date":"2025-03-24T10:13:08","date_gmt":"2025-03-24T10:13:08","guid":{"rendered":"https:\/\/dnllegalandstyle.com\/dnl\/?p=88427"},"modified":"2025-03-24T10:13:11","modified_gmt":"2025-03-24T10:13:11","slug":"alleged-data-breaches-ndpc-probes-tiktok-truecaller","status":"publish","type":"post","link":"https:\/\/dnllegalandstyle.com\/dnl\/alleged-data-breaches-ndpc-probes-tiktok-truecaller\/","title":{"rendered":"Alleged Data Breaches: NDPC Probes TikTok, Truecaller"},"content":{"rendered":"\n

The Nigeria Data Protection Commission (NDPC) says it is investigating TikTok and Truecaller over alleged data privacy violations as part of efforts to enforce compliance with the Nigeria Data Protection Act (NDPA).<\/strong><\/p>\n\n\n\n

Speaking during a press conference in Abuja on Thursday, Vincent Olatunji, the national commissioner and chief executive officer (CEO) of NDPC, said the agency is assessing the platforms\u2019 compliance with data protection laws and would determine necessary regulatory actions based on its findings.<\/p>\n\n\n\n

\u201cAs we speak, we have even gone to the extent of investigating multinationals. We are currently investigating TikTok and Truecaller in the area of data privacy,\u201d Olatunji said.<\/p>\n\n\n\n

\u201cDepending on our findings, if they are able to go through remediation and do what is right, we are happy to work with them.\u201d<\/p>\n\n\n\n

The NDPC CEO noted said when the commission began monitoring data protection compliance, only 4 percent of organisations adhered to regulations.<\/p>\n\n\n\n

He, however, said through increased enforcement and stakeholder engagement, compliance levels have now surpassed 55 percent.<\/p>\n\n\n\n

Olatunji said the NDPC prioritises remediation over immediate sanctions, evaluating data breaches based on their severity, the number of individuals affected, and the potential economic impact.<\/p>\n\n\n\n

Instead of publicly declaring non-compliance, he said the commission provides companies with clear corrective measures to address identified issues.<\/p>\n\n\n\n

The commissioner added that organisations found in violation must keep comprehensive records of their data processing activities and rectify any lapses.<\/p>\n\n\n\n

\u201cAdditionally, they are subject to monitoring for six months to a year to ensure full compliance,\u201d he said.<\/p>\n\n\n\n

Olatunji said while the commission prefers a corrective approach, it will not hesitate to enforce stricter actions if necessary.<\/p>\n\n\n\n

At the press conference, the NDPC also introduced the NDPA general application and implementation directive (NDP Act GAID), a regulatory framework designed to help data controllers and processors comply with the NDPA.<\/p>\n\n\n\n

Olatunji said many organisations lack understanding of data protection regulations, often leading to inadvertent breaches.<\/p>\n\n\n\n

The commissioner said the NDP Act GAID addresses technical and organisational measures in the areas of data protection principles, lawful basis of data processing, NDP Act compliance audit, and data subject rights, among others.<\/p>\n\n\n\n

He said the directive, which will be available on the NDPC\u2019s portal, intends to provide clarity and reinforce the role of data protection officers in ensuring compliance.<\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

The Nigeria Data Protection Commission (NDPC) says it is investigating TikTok and Truecaller over alleged data privacy violations as part of efforts to enforce compliance with the Nigeria Data Protection Act (NDPA). Speaking during a press conference in Abuja on Thursday, Vincent Olatunji, the national commissioner and chief executive officer (CEO) of NDPC, said the agency is assessing the platforms\u2019 compliance with data protection laws and would […]<\/p>\n","protected":false},"author":9,"featured_media":88428,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[11],"tags":[],"class_list":["post-88427","post","type-post","status-publish","format-standard","has-post-thumbnail","category-techlaw-digest"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t