Connect with us

E-Business

NITDA Investigates True caller over Privacy Rights Infraction

Published

on

Mr. Kashifu Abdullahi Inuwa, director general/ceo, National Information Technology Agency (NITDA)
Kindly share this post

The National Information Technology Agency (NITDA) has commenced investigation into a potential breach of privacy rights of Nigerians by the Truecaller Service.

 

In a statement released by Mr. Kashifu Abdullahi Inuwa, director general/CEO, National Information Technology Agency, said that the investigation is in accordance with Section 6(f) of the NITDA Act 2007.

 

The section (as referred to) empowers NITDA to render advisory services in all information technology matters to the public and private sectors,

 

NITDA therefore, said it “wish to inform the public that it commences investigation of the potential breach”.

 

“Initial findings revealed that the Truecaller Privacy Policy is not in compliance with global laws on data protection and the Nigeria Data Protection Regulation (NDPR) in particular.

 

“The findings also revealed that there are over seven million Nigerians who are active users of the Service, hence the need to enlighten the public on some of the areas of non-compliance as well as guide those affected.

 

“The Truecaller Privacy Policy, available HERE, is made of two sets – one for those in the European Economic Area (EEA) and the other for those outside the EEA. Nigeria falls under the second category. Furthermore, every Nigerian user is contracting with Truecaller India.

 

There are marked differences between both policies.

 

Critical assessment of the policy revealed non-compliance with the NDPR. Examples of these are outlined below:

 

  1. Article 1.1 states that ‘Truecaller may supplement the information provided by You with information from third parties and add it to the information provided by You.’

 

This provision contravenes Article 2.1(b) of the NDPR which requires data collection and processing to be accurate and Article 1.3(iii) which requires that valid consent must be specific. By supplementing the personal information of Nigerians without specific consent and accuracy, they are susceptible to serious invasion of their privacy. This has encouraged unscrupulous persons to continue using Nigerian identities to perpetuate fraud.

 

  1. Article 1.2 states that ‘When You install and use the Services, Truecaller will collect personal information from You and any devices You may use in Your interaction with our Services. This information may include e.g.: geo-location; Your IP address; device ID or unique identifier; device manufacturer and type; device and hardware settings; SIM card usage; applications installed on your device; ID for advertising; ad data, operating system; web browser; operator; IMSI; connection information; screen resolution; usage statistics; default communication applications; access to device address book; device log and event information; logs, keywords and meta data of incoming and outgoing calls and messages; version of the Services You use and other information based on Your interaction with our Services such as how the Services are being accessed (via another service, web site or a search engine); the pages You visit and features you use on the Services; the services and websites You engage with from the Services; content viewed by You, content You have commented on or sent to us and information about the ads You see and/or engage with; the search terms You use; order information and other usage activity and data logged by Truecaller’s servers from time to time’.

 

The above provision of the Truecaller Privacy Policy is clearly excessive and invasive of the privacy of its users. Article 2.3(2)d of the NDPR provides – when assessing whether consent is freely given, utmost account shall be taken of whether the performance of a contract, including the provision of a service, is conditional on consent to the processing of Personal Data that is not necessary (or excessive) for the performance of that contract.

 

Contrary to the expectation of many users, the Truecaller service collects far more information than it needs to provide its primary service.

 

  1. Article 3 states that ‘Truecaller may also share personal information with third party advertisers, agencies and networks. Such third parties may use this information for analytical and marketing purposes.’

 

It is global best practice for Users to be informed of the possible third-party processors’ information may be shared with and for what purpose. This Policy flaunts this rule which is also enunciated in the NDPR.

 

“The foregoing are samples of the many illegitimate provisions found in the Truecaller Privacy Policy and Terms of Service. The implications of these are far-reaching.

 

“The provisions of the policy can be exploited to put many Nigerians in unsavoury conditions. In view of this, we urge all Nigerians to take advantage of Article 4 of the Truecaller Privacy Policy which provides – “If any persons do not wish to have their names and phone numbers made available through the Enhanced Search or Name Search functionalities, they can exclude themselves from further queries by notifying Truecaller via its website at www.truecaller.com or as set forth in the contact details below…” Members of the public may also decide to delist themselves from the Truecaller Service completely.

 

“NITDA would like to assure Nigerians that it will continue to monitor the activities of digital service providers with a view to ensuring that the rights of Nigerians are not unduly breached while also improving the operational environment to support ethical players in their bid to get maximum benefit from Nigeria”, the statement reads.

 

 

 

 

 


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Study Reveals Majority of IT Professionals Show Openness to Cyber Immunity

Published

on

Kindly share this post

The cybersecurity landscape is evolving rapidly, with organisations seeking more robust ways to protect their digital assets. A recent global study conducted by Kaspersky reveals a growing shift toward proactive security strategies, particularly the adoption of Secure by Design development and Cyber Immunity – an innovative approach that embeds resilience directly into system architecture.

The study highlights that 90% of cybersecurity professionals surveyed in the Middle East, Turkiye and Africa (META) region are familiar with Secure by Design development. This methodology integrates security into the very fabric of a system from its inception, rather than treating it as an afterthought.

Such an approach is already employed in high-stakes industries like aerospace, where security cannot be bolted on later – it must be intrinsic. Despite its advantages, however, adoption has been slow due to challenges related to standardisation and cost.

Cyber Immunity is the next frontier in cybersecurity

Building on Secure by Design principles, Cyber Immunity takes cybersecurity a step further by creating systems that inherently resist attacks without the need for constant patching or additional security layers. The study reveals that most experts are familiar with Cyber Immunity but interpret it differently.

When asked what they associate with the term, 64% of respondents in the META region linked it to Secure by Design systems that remain resilient under attack, while 56% viewed it as a combination of technology and policy measures that block cybercriminal access. Another 48% connected it to highly skilled cybersecurity teams, indicating that while awareness is high, a unified understanding is still developing.

The growing demand for proactive security

One of the most striking findings is the optimism surrounding inherently secure systems. Over half of respondents in the META region (63%) believe it is already possible or definitely achievable to design systems capable of withstanding cyberattacks without relying on additional security solutions.

Another 32% think it might be possible, reflecting openness to this idea despite some uncertainty. This shift in mindset aligns with a broader industry trend: traditional reactive security measures are no longer sufficient.

With AI-powered threats and increasingly sophisticated attacks, organisations need solutions that do more than just detect breaches—they must prevent them by design.

Integrating Cyber Immunity into security strategies

The study emphasises that resilience, expertise, and flexibility will define the next generation of cybersecurity. While Secure by Design provides the methodology, Cyber Immunity represents the ultimate goal—systems so robust that they minimise reliance on external defences.

“For companies looking ahead, Cyber Immunity offers more than just protection — it brings clear business benefits. When systems are built to be secure from the ground up, there’s less need for constant updates, patches, and extra security tools. That means fewer costs, less strain on IT teams, and stronger, more reliable protection over time,” said Dmitry Lukiyan, Head of KasperskyOS Business Unit.

Most importantly in today’s threat landscape, Cyber Immunity offers robust protection against next-generation challenges — including AI-driven attacks capable of outmaneuvering traditional security measures.

When security becomes an intrinsic property of system architecture rather than an external addition, businesses gain more than just protection—they secure a competitive market advantage.

This proactive approach future-proofs critical infrastructure, enabling organisations to operate confidently even as threats evolve. It transforms cybersecurity from a defensive necessity into a strategic differentiator that accelerates digital transformation while mitigating risk.

As the cybersecurity environment becomes more complex, Cyber Immunity is emerging as a vital strategy. Organisations that adopt it now will not only enhance their protection but also position themselves ahead of the curve in an increasingly volatile digital world.

 


Kindly share this post
Continue Reading

E-Business

Konga launches Jara sales with 25% discount on Starlink kits, free delivery

Published

on

Kindly share this post

Konga, Nigeria’s leading composite e-commerce platform, has launched its inaugural 2026 shopping campaign, Konga Jara, offering 25 per cent discount on Starlink internet kits alongside free nationwide delivery.

Konga launches Jara sales with 25% discount on Starlink kits, free delivery

Konga

The campaign, drawing from the Nigerian concept of “jara” — the extra value traders add to purchases — aims to deliver exceptional deals across categories, helping shoppers turn new year aspirations into reality through affordable technology and value-driven shopping.

To qualify for the Starlink discount, customers must purchase kits on Konga.com, activate them at starlink.com/activate, and email activation details to [email protected] for verification against Starlink’s records. Discounts are subject to terms and conditions.

Konga said spotlighting Starlink underscores reliable internet’s role in Nigeria’s digital economy, supporting work, learning, entrepreneurship and communication for households and businesses.

Mr Onochie Melvin, Head of Commercial Planning at Konga, said: “We listened carefully to what Nigerians said they needed to truly kickstart 2026 on the right footing. Reliable internet connectivity emerged as the foundation upon which other aspirations depend.”

He added: “Students need it for online learning, entrepreneurs need it to scale digital businesses, and professionals rely on it for remote work. This Starlink offer is not just about selling products; it is about removing barriers that prevent Nigerians from fully participating in the digital economy.”

Beyond connectivity, Konga Jara provides genuine products from original equipment manufacturers (OEMs) with transparent pricing, warranties and authenticity guarantees.

As a composite e-commerce ecosystem, Konga integrates shopping, payments and logistics for seamless nationwide access, with exclusive deals shared via its social media channels throughout the campaign.

Shoppers can explore offers at www.konga.com and follow Konga’s official pages for updates across the Konga Group.


Kindly share this post
Continue Reading

E-Business

Firm Identifies Global Scam Activity Linked to the Release of Avatar 3

Published

on

Kindly share this post

The premiere of Avatar 3 has taken place in several countries and has been accompanied by a noticeable increase in online interest. Amid the heightened attention surrounding the release, Kaspersky experts identified an increase in cyber-scam campaigns that exploit the movie’s launch and users’ desire to watch it online. The fraudulent websites target users across multiple regions, indicating attempts by attackers to reach a global audience.

The scam operates as follows: cybercriminals create suspicious websites that offer online access to the Avatar 3 movie. Attackers place particular emphasis on localisation, publishing the sites in multiple languages to attract users from different countries. However, the translations are often poorly executed and contain grammatical errors and inconsistencies, which may serve as indicators of fraudulent activity.

When users attempt to start the video, they are presented with a fake media player and prompted to register in order to obtain “full” or “unlimited” access to the film. As part of the registration process, users are asked to provide personal information, including an email address and mobile phone number.

At later stages, scammers may request additional data, including payment details, under the guise of activating a “free trial.” This creates risks of credential compromise, particularly if users reuse passwords across multiple services, and may also lead to financial losses.

“Cybercriminals consistently exploit major movie premieres to capture users’ attention and increase the effectiveness of their schemes. We advise accessing films only through official platforms and exercising caution when encountering websites that request personal or payment information. It is also important to use reliable security solutions to protect all devices, including mobiles,” comments Olga Altukhova, Senior web content analyst at Kaspersky.

 


Kindly share this post
Continue Reading

Trending