Nigeria: Electoral Commission accused of data security blunder
- Published on 27 September 2016
An ICT-advocacy group in Nigeria is trying to establish how private citizens' data entrusted to the Independent National Electoral Commission (INEC) for election purposes was allegedly transferred to a third party, www.voters.ng.
Paradigm Initiative Nigeria, whose policy work focuses on the digital rights of citizens, had in a letter dated September 19 asked INEC to make details of its data transaction with www.voters.ng available that the reported transfer of the "delicate social infrastructure exchanged in trust" smacks of distrust and lack of due diligence by a public institution, especially as it was done without any real consent of the citizens involved.
"The biggest challenge would be the legal power that INEC has to share such data," notes Gbenga Sesan, the Executive Director of PIN which has been working to advance digital rights and monitor the legal and policy framework around ICTs in Nigeria to ensure that citizens rights are protected online.
He added, "With no Data Privacy law in Nigeria, it's a grey area but policies and guidelines that most countries subscribe to make it important for sensitive data (such as the unique Voter Identification Number) to be shared only as needed, and for sanctions when such data is abused."
Though a password is now required to access the database on www.voters.ng, Sesan said a lot of harm can still be done or could have been done when it had no password because the publishers shared the entire database that made sensitive data available.
He added, "And it is also important to state that data is currency for some businesses, including even public services that require citizens to supply data in order to get service. If data privacy will not be respected, it places the burden of lack of trust on the service provider who must then do extra work to convince the customer/citizen that their data will be in safe hands. And all these in a country without data privacy laws."
INEC has acknowledged receipt of PIN's letter. It has seven days to respond, according to Sesan.
PIN works to extend the conversation around Digital Rights in Nigeria and Africa through training, research, litigation, publishing of policy briefs and hosting an annual Internet Freedom Forum.
In May, PIN released its second annual report on 'The Status of Internet Freedom in Nigeria' which documented the threats to internet freedom and digital rights with focus on legislative framework and policies in Nigeria and incidents of these threats.
ALSO ON ITWEB AFRICA
Govt officials vehemently deny claims and describe them as "classic disinformation".
One Channel Namibia warns that with the help of a hard-drive-encrypting virus, cyber criminals force users to choose between paying an online ransom and losing their files forever.
Local FinTech firm transacts over NGN1 trillion on platform, offers startups a fresh value proposition.
Jens Ischebeck, e-learning specialist Africa, assesses the potential for m-learning in South Africa and formulates some possible strategies for the delivery of online courses in this region of the continent.