HURIWA slams police, NDPC over delayed NIPSS data breach probe

The Human Rights Initiative for Democratic Governance (HURIWA) has formally criticized the Nigerian Police Force and the Nigeria Data Protection Commission (NDPC) for failing to promptly investigate an alleged data breach at the National Institute for Policy and Strategic Studies (NIPSS). The organization is demanding immediate transparency and accountability regarding the compromise of sensitive information.

According to reports, the alleged breach involves a naval officer. HURIWA has specifically faulted the Inspector General of Police and the NDPC for delays in launching a full-scale probe into the incident. The rights group is demanding a clear explanation of how the data was accessed and what measures are being implemented to prevent further leaks.

The Strategic Stakes

NIPSS serves as a high-level think tank for the Nigerian government, tasked with producing strategic research and policy recommendations. Because the institute handles highly sensitive data critical to national governance and security, any breach of its digital or physical archives represents a significant vulnerability. HURIWA argues that the slow response from regulators undermines the integrity of the state's most sensitive institutions.

Implications for Data Privacy

The perceived inaction by the NDPC and the police suggests a systemic failure in the enforcement of data protection laws within Nigeria. While the NDPC is mandated to oversee the protection of personal data, the delay in this high-profile case raises questions about the commission's ability to hold powerful state actors accountable. If a strategic institution like NIPSS can suffer a breach without a swift regulatory response, it signals a precarious environment for data privacy across other government agencies and the private sector.

National Security Concerns

Beyond the legal failure, the breach poses a direct risk to national security. The exposure of strategic data could provide unauthorized actors with insights into Nigeria's internal policy frameworks and security strategies. The involvement of a naval officer further complicates the matter, suggesting that the breach may intersect with military or defense intelligence.

What Remains Unconfirmed

As of now, neither the Nigerian Police Force nor the NDPC has provided a detailed timeline for the investigation or confirmed the extent of the data lost. It remains unclear whether the breach resulted from an internal leak or an external cyberattack. Observers are now watching to see if the pressure from HURIWA will force the NDPC to release a formal report on the incident.