The National Information Technology Development Agency (NITDA) has imposed a fine of N5 million fine on Electronic Settlement Limited for breaching protection of personal data.
NITDA in a statement Monday, by Mrs Hadiza Umar, Head Corporate Affairs and External Communication disclosed that Electronic Settlement Limited shall as well be under a six-months information technology oversight by the agency, saying this shall involve oversight implementation of prescribed security controls and processes.
Coming on the heels of an exhustive investigation process on the personal data breach by Electronic Settlement Limited which aimed to assess the risk resulting from the breach, with a view to identifying the causes, remedial actions taken and other necessary issues to avoid recurrence.
The regulator disclosed that sequel to its findings that a clear data security and governance document is drawn up between the Electronic under Limited and all its Information Technology services vendors identifying roles, responsibilities and processes involved in securing and protecting personal data.
The company is further required to conduct regular NDPR training for all staff, publish and implement appropriate policies as required by the NDPR.
It must submit 2020/2021 regulatory audit as required by Article 4.1.6 of the NDPR, conducted by a Data Protection Compliance Organisation (DPCO) as licensed by NITDA.
It is equally required to conduct Data Protection Impact Assessment on some data intensive applications and products.
Against the backdrop of this breach, NITDA is encouraging every data controller and processor to embark on necessary measures to protect personal data.
The agency has graciously approved the extension of time to file the annual audit report to 30th June, 2021. “We further reaffirm our continued commitment to implementing the NDPR vigorously and providing periodic updates to the public with regards to our activities and investigations in discharge of our mandate,” the statement concluded.
