NDPC to investigate alleged NIMC’s unauthorised access to enrollees’ personal data
The Nigeria Data Protection Commission (NDPC) says it will investigate the alleged unauthorised access to the personal data of enrollees by the National Identity Management Commission (NIMC).
Its National Commissioner, Dr. Vincent Olatunji, National Commissioner of NDPC, said this in a statement in Abuja on Sunday, signed by Mr. Babatunde Bamigboye, Head of Legal, Enforcement, and Regulations of NDPC.
“This investigation is a further regulatory measure to be taken by NDPC in the wake of public concerns over reports of illegal access to personal data of enrollees by a shadowy entity called XpressVerify.com,” Olatunji said.
He recalled that the NDPC had been engaging with the NIMC on fostering the adequacy of data protection and consequently had a workshop in February.
According to him, this is one of a continuum of measures being put in place by the federal government to ensure data privacy and protection.
“We note that NIMC has initiated an internal investigation and has immediately given full assurance of cooperation with NDPC.
“NDPC will get to the root of the allegation and review existing mediums through which any entity may lawfully verify the identity of enrollees on its platform.
“Furthermore, NDPC will work with relevant agencies to audit the trails of the alleged unauthorised data processing and monetization of the same,” he said.
Olatunji noted that those who were found culpable of violating the Nigeria Data Protection Act, 2023, would be brought to justice.
The National Commissioner further directed that the preliminary findings of the investigation should be made public within seven days. (NAN)
Contains information related to marketing campaigns of the user. These are shared with Google AdWords / Google Ads when the Google Ads and Google Analytics accounts are linked together.
90 days
__utma
ID used to identify users and sessions
2 years after last activity
__utmt
Used to monitor number of Google Analytics server requests
10 minutes
__utmb
Used to distinguish new sessions and visits. This cookie is set when the GA.js javascript library is loaded and there is no existing __utmb cookie. The cookie is updated every time data is sent to the Google Analytics server.
30 minutes after last activity
__utmc
Used only with old Urchin versions of Google Analytics and not with GA.js. Was used to distinguish between new sessions and visits at the end of a session.
End of session (browser)
__utmz
Contains information about the traffic source or campaign that directed user to the website. The cookie is set when the GA.js javascript is loaded and updated when data is sent to the Google Anaytics server
6 months after last activity
__utmv
Contains custom information set by the web developer via the _setCustomVar method in Google Analytics. This cookie is updated every time new data is sent to the Google Analytics server.
2 years after last activity
__utmx
Used to determine whether a user is included in an A / B or Multivariate test.
18 months
_ga
ID used to identify users
2 years
_gali
Used by Google Analytics to determine which links on a page are being clicked
30 seconds
_ga_
ID used to identify users
2 years
_gid
ID used to identify users for 24 hours after last activity
24 hours
_gat
Used to monitor number of Google Analytics server requests when using Google Tag Manager