The Nigeria Data Protection Commission (NDPC) has commenced a forensic investigation into the University of Lagos (UNILAG), Lotus Bank and Hackerbella Ltd, following public complaints alleging that students’ personal data was used to open bank accounts without a lawful basis. Specific areas under review include Data Protection Impact Assessments (DPIAs), the lawfulness and transparency of any credit scoring or profiling activities, and the use of automated decision-making systems. The commission said institutions entrusted with the personal data of students, staff and other members of their communities have a heightened responsibility to ensure such data is processed lawfully, fairly, transparently and securely. Read also: NDPC and Meta launch major data protection program to strengthen privacy in Nigeria“Accordingly, the NDPC warns educational institutions that are yet to comply with its existing data protection compliance directives to do so immediately,” the commission said in the statement. UNILAG, Lotus Bank and Hackerbella Ltd have not issued public responses to the allegations.