*Cybersecurity Expert Calls On Prof. Charles Igwe To Urgently Address ‘Serious’ Privacy Violations On University Website
![](https://thenigerialawyer.com/wp-content/uploads/2025/05/idrinstitute.png")
![](https://thenigerialawyer.com/wp-content/uploads/2024/11/TheNigerialawyer-WhatsApp-Channel1.jpg")
The University of Nigeria in Nsukka is facing criticism after it was discovered that sensitive personal data of students, including names, birthdates, phone numbers and identification numbers, was publicly accessible on the university’s website.
In an open letter to the university’s Vice Chancellor, Professor Charles Arizechukwu Igwe, researcher Olumide Babalola alleged that the public disclosure of student data violates the Nigeria Data Protection Act of 2023 as well as students’ fundamental right to privacy.
“The personal data being publicly displayed on the University’s website qualifies as sensitive information under this law, and its unauthorized disclosure constitutes a serious violation,” Babalola wrote. He warned that the data exposure puts students at risk of identity theft, harassment, discrimination and other harms.
Babalola called on the university to immediately remove the personal data from public access, notify affected students, and implement stronger data protection measures in line with the Data Protection Act. These measures should include encryption, access controls, data audits and obtaining explicit consent from students before collecting and processing their personal information.
“As a renowned institution of higher learning, the University of Nigeria should be at the forefront of upholding the rights of its students, including their right to privacy,” the letter stated. “By aligning with contemporary data protection standards and complying with the Nigeria Data Protection Act 2023, the University can not only avoid legal penalties but also demonstrate its commitment to the security and well-being of its students.”
The university has not yet publicly responded to the allegations. If confirmed, the data protection agency NITDA could fine the school up to N10 million or 2% of annual revenue for violating the Data Protection Act. The university could also face lawsuits from affected students.
OPEN LETTER TO PROFESSOR CHARLES ARIZECHUKWU IGWE, THE VICE CHANCELLOR, UNIVERSITY OF NIGERIA, NSUKKA
By Olumide Babalola
Dear Prof.,
DISPLAY OF STUDENTS’ PERSONAL DATA ON UNIVERSITY WEBSITE: URGENT CALL TO ADDRESS BREACH OF STUDENTS’ PRIVACY AND DATA BREACH
I hope this letter finds you well. I write to express grave concern over the on-going routine violation of students’ right to privacy arising from the University’s public display of sensitive personal information on its official website. It has come to my attention that the University of Nigeria has made the personal data of its students, including registration numbers, JAMB numbers, phone numbers, full names, gender, local government areas, states of origin, dates of birth, and dates of graduation, publicly accessible online. This practice is highly concerning and constitutes a violation of both Nigerian law and global data protection standards.
Violation of the Nigeria Data Protection Act (NDPA) 2023
The Nigeria Data Protection Act (NDPA) 2023 clearly stipulates provisions that are designed to protect individuals’ personal data, safeguard their privacy, and prevent unauthorized access or exposure of such data. The personal data being publicly displayed on the University’s website qualifies as sensitive information under this law, and its unauthorized disclosure constitutes a serious violation of several sections of the NDPA, including but not limited to:
1. Section 24(1) of the NDPA requires that data controllers (in this case, the University) must process personal data lawfully, fairly, and in a transparent manner. Publicly displaying students’ sensitive information online violates the principle of lawful and fair processing.
2. Section 25 obligates data controllers to implement appropriate technical and organizational measures to ensure the security of personal data. The University’s failure to safeguard this information from public access violates this provision.
3. Section 26 requires that personal data shall not be disclosed to third parties without the explicit and informed consent of the data subject except other lawful grounds exist. The public availability of this data without the consent of students is in clear contravention of this section.
Privacy Harms and Risks to Students
Beyond the legal ramifications, the public exposure of students’ personal information poses significant privacy risks and potential harm, including but not limited to:
• Identity theft: The publication of sensitive data such as registration numbers, phone numbers, and dates of birth makes it easy for malicious actors to impersonate students for fraudulent activities.
• Harassment and Safety Concerns: Publicly available phone numbers and personal identifiers can lead to unwarranted and harmful contact, harassment, and threats to students’ personal safety.
• Discrimination and Profiling: Sensitive details such as state of origin, gender, and local government area can be used to perpetuate discriminatory practices, undermining the principles of fairness and equality.
Violation of Students’ Right to Privacy
The right to privacy is a fundamental human right, recognized under the Nigerian Constitution and international instruments. The University, as an educational institution, has a duty to uphold this right by ensuring the confidentiality of students’ personal data. The public disclosure of sensitive data infringes on this right, leaving the affected individuals vulnerable to various forms of privacy invasion.
Call to Action
I respectfully urge you to take immediate steps to address this breach of privacy. Specifically, I call on the University to:
1. Cease the public display of personal data: Promptly remove all students’ personal data from public access on the University’s website to prevent further unauthorized disclosure.
2. Implement appropriate data protection measures: Introduce and enforce data security measures in line with the provisions of the Nigeria Data Protection Act 2023, including encryption, access controls, and regular audits of data processing practices.
3. Adopt a privacy-first approach: Ensure that the University adopts contemporary data protection practices and privacy by design principles, ensuring that students’ personal information is collected, stored, and processed only with their explicit consent and with the highest level of security.
4. Notify affected students: Consider notifying all affected students about the data breach and compensating them for any damages or risks they have incurred as a result of this data exposure.
Conclusion
As a renowned institution of higher learning, the University of Nigeria should be at the forefront of upholding the rights of its students, including their right to privacy. By aligning with contemporary data protection standards and complying with the Nigeria Data Protection Act 2023, the University can not only avoid legal penalties but also demonstrate its commitment to the security and well-being of its students. I trust that you will give this matter the urgent attention it requires and take corrective actions without delay.
Thank you for your understanding and anticipated cooperation.
Respectfully,
Olumide Babalola
PhD Researcher,
University of Portsmouth
United Kingdom
“History of Rivers State Judiciary: A Compendium of Personalities on the Bench.” Authored by Ampim Gogo Blankson, Esq., Deputy Director at the Rivers State Ministry of Justice, in collaboration with the Rivers State Judiciary 💰 Cover Price: ₦20,000.00 (Twenty Thousand Naira) Bukky Law Books, Rivers State High Court Complex, Moscow Road, Port Harcourt – 📞 08034868754📞 08034729738📞 Enquiries:______________________________________________________________________ Follow the voice of wisdom. Read Prof. Mike Ozekhome SAN. Be Inspired. 
For Enquiries: 📞 +234 704 044 9375 | +234 814 813 4773 | +234 816 872 3532 ✉️ educodexl@gmail.com ______________________________________________________________________ Grab Your Complete Law Reports Now!!! IP, Company, Evidence & Land Cases - All Volumes With Digital Index!!!
To get a copy kindly Call 07044444777, 07044444999, 08181999888, https://alexandernigeria.com/ _____________________________________________________________________
[A MUST HAVE] Evidence Act Demystified With Recent And Contemporary Cases And Materials
