THE National Information Technology Development Agency (NITDA) has sanctioned an online lending platform, Soko Lending Company Limited (Soko Loans), for privacy invasion.
A statement from NITDA said this action was taken after receiving series of complaints against the company for unauthorized disclosures, failure to protect customers’ personal data and defamation of character as well as carrying out the necessary due diligence as enshrined in the Nigeria Data Protection Regulation (NDPR).
One of such complaints filed by Bloomgate Solicitors on behalf of its client, the data subject, was received on Monday, November 11, 2019. NITDA, as part of its due diligence process, commenced investigation over the alleged infractions of the provisions of the NDPR.
Soko Loans grants its customers uncollateralised loans and requires a loanee to download its mobile application on their phone and activate a direct debit in the company’s favour. The app gains access to the loanee’s phone contacts.
According to one of the complainants, when he failed to meet up with his repayment obligations due to insufficient credit in his account on the date the direct debit was to take effect, the company unilaterally sent privacy-invading messages to the complainant’s contacts.
Investigation revealed that complainants’ contacts who were neither parties to the loan transaction nor consented to the processing of their data have confirmed the receipt of such messages. The Agency made strident efforts to get Soko Loan to change the unethical practise but to no avail. After the Agency’s investigations team secured a lien order on one of the company’s accounts by which it could come up with privacy-enhancing solutions for its business model, Soko Loan decided to rebrand and directs its customers to pay into its other business accounts.
The Agency’s investigation further revealed that the company embeds trackers that share data with third parties inside its mobile application without providing users information about it or using the appropriate lawful basis.
NITDA in a statement seen by Nigerian Tribune said it has therefore found Soko Loan and its entities in violation of the following legal provisions:
“Use of non-conforming privacy notice, contrary to Article 2.5 and 3.1(7) of the NDPR.
“Insufficient lawful basis for processing personal data, contrary to Articles 2.2 and 2.3 of the NDPR.
“Illegal data sharing without appropriate lawful basis, contrary to Article 2.2 of the NDPR.
“Unwillingness to cooperate with the Data Protection Authority, contrary to Article 3.1 (1) of Data Protection Implementation Framework and non-filing of NDPR audit reports through a licensed Data Protection Compliance Organisation (DPCO), contrary to Article 4.1(7) of the NDPR.”
In view of the foregoing and in consideration of its implication on the privacy of Nigerians and erosion of trust in the digital economy, NITDA said it has imposed a monetary sanction of N10 Million on Soko Lending Company Limited.
It directed that no further privacy-invading messages be sent to any Nigerian until the company and its entities show full compliance with the NDPR; directed the company to pay for the conduct of a Data Protection Impact Assessment by a NITDA appointed DPCO on its operation; and placement on a mandatory Information Technology and Data Protection oversight for nine months.
“It may be noted that the criminal aspects of this investigation have been deposited with the Nigerian Police to determine if the executives of the company are liable to imprisonment for violating Section 17 of the NITDA Act, 2007,” the agency stated.
NITDA, therefore, uses this medium to remind all Nigerian businesses and data controllers of their obligation to engage NITDA-licensed Data Protection Compliance Organisations (DPCO) to guide them towards compliance with the data protection law. The Agency is poised to fully enforce the NDPR with the aim of sanitising the operating environment, instilling confidence in the digital economy and protecting the right to privacy of Nigerians.
YOU SHOULD NOT MISS THESE HEADLINES FROM NIGERIAN TRIBUNE
We Have Not Had Water Supply In Months ― Abeokuta Residents
In spite of the huge investment in the water sector by the government and international organisations, water scarcity has grown to become a perennial nightmare for residents of Abeokuta, the Ogun State capital. This report x-rays the lives and experiences of residents in getting clean, potable and affordable water amidst the surge of COVID-19 cases in the state…
Selfies, video calls and Chinese documentaries: The things you’ll meet onboard Lagos-Ibadan train
The Lagos-Ibadan railway was inaugurated recently for a full paid operation by the Nigerian Railway Corporation after about a year of free test-run. Our reporter joined the train to and fro Lagos from Ibadan and tells his experience in this report…
[ICYMI] Lekki Shootings: Why We Lied About Our Presence — General Taiwo
The Lagos State Judicial Panel of Inquiry probing the killings at Lekki Toll Gate, on Saturday resumed viewing of the 24hrs footage of the October 20, 2020 shooting of #EndSARS protesters by personnel of the Nigerian Army…
ICYMI: How We Carried Out The 1993 Nigerian Airways Hijack —Ogunderu
On Monday, October 25, 1993, in the heat of June 12 annulment agitations, four Nigerian youngsters, Richard Ajibola Ogunderu, Kabir Adenuga, Benneth Oluwadaisi and Kenny Razak-Lawal, did the unthinkable! They hijacked an Abuja-bound aircraft, the Nigerian Airways airbus A310, and diverted it to Niger Republic. How did they so it? Excerpts…
Sahabi Danladi Mahuta, a community mobiliser and APC chieftain. Mahuta spoke to select journalists at the sidelines of an Islamic conference in Abuja recently. Excerpts…
and then