The leaked phone call between Peter Obi and Bishop David Oyedepo has already raised concerns about privacy breaches in Nigeria, particularly in light of existing laws from NITDA and the NCC.
To provide some background, on March 21, 2023, a phone call between Peter Obi, the presidential candidate of the opposition party in Nigeria, and Bishop David Oyedepo, founder of Living Faith Church Worldwide, was leaked online. The conversation reportedly took place on March 20, 2023, and lasted over an hour.
In the phone call, the two men discussed a wide range of topics, including the upcoming presidential election, the state of the Nigerian economy, and the Church’s role in politics. However, the leak of the phone call raised concerns about the privacy of individuals in Nigeria, particularly in the context of laws from NITDA and the NCC.
NITDA, (National Information Technology Development Agency), is a government agency in Nigeria that is responsible for the development and regulation of information technology in the country. The agency has developed several laws and regulations aimed at protecting the privacy of individuals, including the Nigerian Data Protection Regulation (NDPR), which came into force in 2019.
The NDPR is designed to regulate the processing of personal data in Nigeria and is applicable to all individuals and organizations that collect, process or store personal data. The regulation requires organizations to obtain consent from individuals before collecting their personal data, and imposes strict rules on how personal data is processed, stored, and shared.
Similarly, the Nigerian Communications Commission (NCC) is the government agency responsible for regulating the telecommunications industry in Nigeria. The NCC has also developed several regulations aimed at protecting the privacy of individuals, including the Consumer Code of Practice regulations, which define the rights and responsibilities of consumers of telecommunications services in Nigeria.
Read more: Biggest data breaches caused by security misconfiguration
The leaked phone call between Peter Obi and Bishop David Oyedepo highlights a breach of privacy in Nigeria as it is a violation of their fundamental right to privacy. The Nigerian Constitution recognizes the right to privacy as a basic human right, and it is protected by various laws and regulations, including the NDPR and the Consumer Code of Practice.
The NDPR provides that personal data may not be processed without the consent of the data subject or the data subject’s legal representative. The Regulation also requires that organizations take appropriate technical and organizational measures to ensure the security of personal data against unauthorized or unlawful processing and against accidental loss, damage or damage.
Similarly, consumer code of practice regulations mandate that the privacy of communications consumers be respected and protected. It states that telecom operators may not intercept, listen to, or record any communication transmitted over their networks without the consent of the notifying parties.
In the case of the leaked phone call between Peter Obi and Bishop David Oyedepo, it is not clear how the call was obtained or who was responsible for its leak. However, the fact that it was leaked without the consent of the individuals involved raises concerns about the privacy of phone calls and other forms of communication in Nigeria.
The leak may have occurred due to a breach of security in the communications network, such as hacking or call interception. It could also be a case of someone intentionally recording the call without the knowledge or consent of the parties involved.
Regardless of how the leak occurred, it is a violation of the right to privacy of the individuals involved. The leak could have devastating consequences for their personal and professional lives, and it could also have a chilling effect on freedom of expression and communication in Nigeria.
Read more: 50% of data breaches are in business How Nigeria protects the data of millions of Nigerians
Previous data leaks in Nigeria
MTN data breach in 2016: In 2016, the personal data of more than 55 million MTN Nigeria subscribers was leaked online. The data included subscribers’ names, phone numbers, and other personal details. The breach reportedly caused an insider to illegally copy the data and sell it to unauthorized persons. JAMB data breach in 2019: The Joint Admissions and Certificate Board (JAMB), the agency responsible for conducting entrance examinations for Nigerian universities, faced a data breach in 2019. The personal data of more than 1.3 million candidates who participated in the examination that year was leaked online. The breach reportedly caused an insider to illegally copy the data and sell it to unauthorized persons. NDLEA data breach in 2021: The National Drug Law Enforcement Agency (NDLEA) experienced a data breach in 2021, in which the personal data of more than 15,000 job applicants was leaked online. The data included names, phone numbers, email addresses, and other personal details. The hack was reportedly caused by a hacker gaining unauthorized access to the agency’s database.
These breaches highlight the vulnerability of personal data in Nigeria and the need for stronger measures to protect it. The breaches were caused by a variety of factors, including insider threats, hacking, and poor security measures. The consequences of these breaches are far-reaching, as they can lead to identity theft, financial fraud, and other forms of cybercrime. It is therefore imperative for individuals, organizations and government agencies to take proactive steps to protect personal data and prevent breaches from occurring in the first place.
Other notable data breaches include,
INEC staff data breach: In 2020, the personal data of more than 10,000 INEC staff members were leaked online. The data included names, phone numbers, and other personal details. The breach reportedly caused an insider to illegally copy the data and sell it to unauthorized persons. The suspect was arrested and charged to court. NIMC data breach: The National Identity Management Commission (NIMC) suffered a data breach in 2021, exposing the personal data of more than 60 million Nigerians. The breach was reportedly caused by an insider who illegally accessed the agency’s database and sold the data to unauthorized persons. The police later arrested the suspect. NSITF data breach: The Nigerian Social Insurance Trust Fund (NSITF) suffered a data breach in 2020, in which personal data of over 29,000 employees were leaked online. The breach reportedly caused an insider to illegally copy the data and sell it to unauthorized persons. The police later arrested the suspect.
These breaches show that civil servants who gain access to sensitive data can also pose a threat to data privacy and security. It is therefore essential for government agencies to put in place strong data protection policies and security measures to prevent unauthorized access and misuse of personal data. It is also important to train employees and make them aware of the importance of data privacy and security to prevent breaches caused by insider threats.
The leaked phone call between Peter Obi and Bishop David Oyedepo highlights the need for stronger measures to protect the privacy of individuals in Nigeria whether it be loan sharks or other offenders. Government, telecom operators, and other stakeholders must take steps to ensure that personal data and communications are adequately protected from unauthorized access, interception, or disclosure.
The recent leak of the phone call between Peter Obi and Bishop David Oyedepo highlights the breach of privacy in Nigeria, despite NITDA and NCC laws meant to protect the privacy of individuals. It is important for individuals and organizations to be aware of their rights and responsibilities under these laws and to take steps to protect their personal data and communications.