24 Nigerian Agencies Caught Breaking Data Privacy Laws – North Central
Share
Nigeria’s journey toward digital governance faces a serious setback as 24 government agencies in the North-Central region have been found operating without published privacy policies.
According to a report by the Foundation for Investigative Journalism (FIJ), this violation of the Nigeria Data Protection Act (NDPA) 2023 exposes millions of Nigerians to risks of identity theft, unauthorized data sharing, and cybercrime.
Privacy policies are a core requirement under the NDPA, ensuring that individuals are informed about how their data is collected, used, stored, and shared. The absence of such policies is a clear breach of trust between government institutions and citizens.
Table: NDPA Compliance Status of 24 Agencies in Nigeria’s North-Central
| State / FCT | Agency / Department | Type / Function | Main Data Collected or Managed | Privacy Policy |
|---|---|---|---|---|
| Benue | Benue Geographic Information Service (BENGIS) | State GIS | Land mapping, cadastral records, spatial planning data. | ✅ Yes |
| Benue | Benue State Bureau of Statistics | Statistics bureau | Socio-economic, demographic, and administrative data. | ❌ No |
| Benue | Benue State Health Insurance Agency | Health data agency | Facility-based and community health records. | ❌ No |
| Benue | Benue State Tax Agency | Sectoral data unit | Environmental sanitation and waste management data. | ✅ Yes |
| FCT (Abuja) | Abuja Geographic Information Systems (AGIS) | Territory GIS | Cadastral mapping, land titles, spatial data for FCT. | ❌ No |
| FCT | FCT IRS (Planning & Statistics) | Urban statistics | Urban and socio-economic data for city management. | ✅ Yes |
| FCT | Health & Human Services Secretariat – HMIS Unit | Health data system | Health facility reporting and epidemiological data. | ❌ No |
| FCT | One Stop Website (MyFCTA) | Environmental agency | Waste collection, sanitation, and environmental quality data. | ✅ Yes |
| FCT | Land & Housing Department – Registry | Land registry | Land titles and administrative records. | ❌ No |
| Kogi | Kogi Geographic Information System (KOGIS) | State GIS | Land administration, maps, satellite imagery, property data. | ❌ No |
| Kogi | State Investment Promotion Agency | Statistics bureau | Household, economic, and social sector statistics. | ❌ No |
| Kogi | State Primary Health Insurance Agency | Health agency | Routine health management data from facilities. | ❌ No |
| Kogi | State Internal Revenue Service | Land management | Title registration, property and cadastral data. | ❌ No |
| Kwara | Kwara Geographic Information Service (KWGIS) | State GIS | Land-use maps, cadastral data, property valuation records. | ❌ No |
| Kwara | Kwara Resident Registration Agency | Statistics bureau | State GDP inputs, socio-economic indicators. | ❌ No |
| Kwara | Kwara Health Insurance Agency | Health information system | Health facility and public health data. | ❌ No |
| Kwara | Kwara IRS | Land data office | Titles, deeds, and cadastral mapping data. | ❌ No |
| Nasarawa | Nasarawa Geographic Information Service (NAGIS) | State GIS | Geospatial, cadastral, and land-use data. | ❌ No |
| Nasarawa | NASIDA | Statistics bureau | Sectoral and socio-economic statistics. | ❌ No |
| Nasarawa | State Health Insurance Agency | Health agency | Health indicators, service coverage, immunisation data. | ❌ No |
| Nasarawa | State IT & Digital Economy Agency | Environmental data unit | Waste management, erosion control, environmental audit data. | ❌ No |
| Niger | Niger State Geographic Information System (NIGIS) | State GIS | Land records, spatial mapping, property registration data. | ❌ No |
| Niger | Niger State Bureau of Statistics (NSBS) | Statistics bureau | Socio-economic and demographic datasets. | ❌ No |
| Niger | Niger State Health Insurance Agency | Health data unit | Facility-level health and disease surveillance data. | ❌ No |
| Niger | Niger State Investment Promotion Agency | Disaster data office | Disaster incident logs, displacement, and relief data. | ❌ No |
| Plateau | Plateau State Geographic Information Service (PLAGIS) | State GIS | Digital maps, land administration and property data. | ❌ No |
| Plateau | Plateau State IRS | Statistics bureau | Economic and development indicators, sectoral statistics. | ❌ No |
| Plateau | Plateau State Health Insurance Agency | Health agency | Health facility data, immunisation and outbreak monitoring. | ❌ No |
| Plateau | Plateau State Investment Agency | Investment agency | State-level investments and development programs. | ❌ No |
(List adapted from FIJ’s report, grouped into categories for clarity.)
Why This is a Big Problem
These agencies hold sensitive information such as:
- Biometric data (from IDs, exams, and national records)
- Health records (collected by hospitals & health offices)
- Employment and educational details (schools, exams, recruitment)
- Financial data (housing, loans, insurance)
Without privacy policies or proper safeguards, citizens are at risk of:
- Identity theft & fraud
- Unauthorized sale/sharing of data
- Cyberattacks due to weak systems
- Lack of redress when rights are violated
Risks to National Security
Beyond individual harm, these lapses threaten Nigeria’s digital economy and global standing. International businesses demand strong data protection before partnering with government or local agencies. Non-compliance could undermine Nigeria’s bid for foreign investment, fintech growth, and cross-border trade.
Way Forward: How to Fix the Gap
To rebuild trust and strengthen governance, Nigeria must:
- NDPC Enforcement: Apply sanctions and fines against non-compliant agencies.
- Transparency: Mandate all agencies to publish updated privacy policies.
- Audits: Conduct independent checks on how agencies process and store data.
- Capacity Building: Train staff in privacy law, data protection, and cybersecurity.
- Citizen Awareness: Encourage Nigerians to demand accountability from agencies.
FAQs on Nigerian Data Privacy Violations
Q1. What is the NDPA?
The Nigeria Data Protection Act (NDPA) 2023 is the country’s primary data protection law. It regulates how organizations collect, store, and use personal data.
Q2. Why are privacy policies important?
They ensure transparency, inform citizens how their data is used, and protect against misuse or unauthorized access.
Q3. What happens to agencies that fail to comply?
They risk sanctions, fines, and reputational damage. Non-compliance can also expose them to lawsuits from data subjects.
Q4. What can Nigerian citizens do?
Citizens can file complaints with the Nigeria Data Protection Commission (NDPC) if they believe their rights are being violated.
Q5. How does this compare with global laws?
Similar to the GDPR in Europe, the NDPA places legal obligations on organizations. Non-compliance could affect Nigeria’s global data partnerships.
Final Thoughts
The revelation that 24 government agencies in Nigeria’s North-Central region are operating without privacy policies is a national wake-up call. Data privacy is not just a compliance checkbox—it’s about protecting citizens’ fundamental rights in a digital age.
For Nigeria to advance in the global digital economy, government agencies must lead by example in compliance, transparency, and data security. Anything less risks eroding public trust and exposing millions to preventable harm.
Leave a Reply