Fidelity Bank Fined 555 Million Naira for Data Breach by NDPC

The Nigeria Data Protection Commission (NDPC) has fined Fidelity Bank Plc 555 million naira for violating data protection laws.

The fine, imposed on Tuesday, follows the bank’s lack of cooperation during investigations into the breach, according to NDPC’s National Commissioner, Dr. Vincent Olatunji.

The fine represents 0.1% of Fidelity Bank’s annual gross revenue in 2023, marking the highest penalty issued by the commission to date. The bank has 14 days to pay the fine after receiving the official notification.

Dr. Olatunji said the importance of data protection compliance and warned that non-compliance will be strictly penalized. The NDPC continues to emphasize the need for awareness and adherence to data protection laws as the regulatory framework in Nigeria evolves.

EDITOR’S PICKS

• • Midnight Fire Destroys Multi-Million Naira Goods in Anambra Market
  • Poland Tightens Student Visa Rules Amid Scandal Over System Abuse
  • FG Mandates Submission of Matriculation Lists to Combat Fake Degrees

Olatunji said: “Data protection compliance is important and we have stated that non-compliance will be punished. We have penalties that range from N10m or up to 2 percent of gross earnings for the previous year.

“The whole thing is about awareness for people to be aware of what is in the law, and the data protection ecosystem in Nigeria is still evolving, which is why we need to create more awareness as much as we can to avoid ambiguity.

“We have a PPP model to ensure compliance, we have licensed some professionals on data protection, that’s the Data Protection Compliance Organisations of Nigeria.

“We have licensed about 194 of them, and they go around organizations, private sectors, to take them through compliance in terms of crafting their privacy policy, creating awareness within the organizations.

“It is about letting them know their obligations under the law and carrying out Data Protection impact assessments, training their staff and registering with us, and submitting their annual report to the commission, with this we will know the level of compliance.

FURTHER READING

• Tinubu Approves Reconstruction Of Wagga Bridge Linking Adamawa, Borno
• Police Name Suspect Behind Hotel Presidential Dynamite Blast
• Mother, Five Children Die After Eating Local Delicacy In Kano

“The penalty for a data breach is huge if you don’t comply. Penalties can range from 10 million naira even up to 2 percent of their annual gross income for the previous year.

“However, in most of the breaches we have treated, we look at the level of the breach, the impact, the number of data subjects affected, and the level of cooperation that is involved.

“Since we started the only time we issued a major penalty was yesterday on Fidelity Bank.

“We issued a fine of about 555 million that they have to pay. We observed some breaches, we have been working with them since April 2023 on the investigation, and by the time we finalised, they became arrogant so we decided to issue a full penalty on them, which is about 0.1 percent of the gross earnings for 2023.”

Click here to watch our video of the week: