NITDA slams ₦5m fine on Electronic Settlement over data breach

 

NITDA

National Information Technology Development Agency, NITDA, has ordered a data controller, Electronic Settlement restricted to pay the add of N5 million as fine sure enough breaches on personal information entrusted to the corporate. 


NITDA same its action was in line with the wants of the National information Protection Regulation, NDPR. The agency additionally directed the corporate to conduct information Protection Impact Assessment on some  of its data-intensive applications and product. 


Electronic Settlement restricted,  ESL is associate degree autochthonous payments company that claims to own the capability to revolutionise the payment trade in Nigeria. 


NITDA explained that the inquiring method that LED to the fine, concerned associate degree analysis of the company’s applications and websites; visit to the company’s workplace in city, review of its technical documents as submitted to the Agency and interrogation of its officers by NITDA investigation team in national capital. 



“The company has been well briefed on our prescriptions for higher info security and protection of non-public data”. 


In compliance with the NDPR and therefore the got to forestall a repeat of this unfortunate breach, NITDA directed that Electronic Settlement restricted shall be below a six-month info technology oversight by NITDA which the oversight shall involve  implementation of prescribed security controls and processes; that a transparent information security and governance document is mixed up between the Electronic Settlement restricted and every one its info Technology services vendors distinguishing roles, responsibilities and processes concerned in securing and protective personal information which the corporate conduct regular NDPR coaching for all employees, publish and implement acceptable policies pro re nata by the NDPR. 



The agency additionally directed that the corporate ought to submit 2020/2021 restrictive audit pro re nata by Article 4.1.6 of the NDPR, conducted by a knowledge Protection Compliance Organisation, DPCO as authorized by NITDA. 


Meanwhile, the agency has approved the extension of your time to file the annual audit report back to thirtieth Gregorian calendar month, 2021. 


It thanked the general public for its continued interest in making certain the total implementation of the NDPR to safeguard personal information of voters and inspired each information controller and processor to start up necessary measures to safeguard personal information.


 NITDA any reaffirmed its continued commitment to “implementing the NDPR smartly and providing periodic updates to the general public with regards to our activities and investigations in discharge of our mandate.” Vanguard News Nigeria © 2019 Vanguard Media restricted, Nigeria Manage your cookies don't sell my data Unblock Notifications Oops, this content cannot be loadedbecause you are having property issues


Post a Comment

Previous Post Next Post