NCC Warns Telecoms Firms Against Disclosing Customers' Data

Nigeria's telecoms industry regulator has said that it is unlawful for operators to disclose the database of subscribers on their network to anyone without permission.

Umar Danbatta, Executive Vice Chairman, Nigerian Communications Commission (NCC) said such practice is illegal and subscribers should escalate such matter to the attention of the regulator for necessary action.
“It is wrong for telecommunications operators to disclose any data of subscribers on their network without permission. It is unlawful.
“If such instances take place, then the subscriber in question can escalate this matter to the NCC and we will investigate and establish whether that is the case and take necessary regulatory measures.
“The database of subscribers with network operators is not supposed to be disclosed to anyone.
“It can be done lawfully with interception project in place where such data can be acquired in the interest of security of the nation.
“We must try to ensure the security and privacy of all subscribers on the telecommunication networks, that is the only way we can instill confidence in subscribers and other Nigerians (who) patronise telecommunications service,” he said.
Danbatta, spoke at the Telecom Consumer Parliament with the theme: “Challenges to Cybercrime: The Role of Telecom Service Providers ” on Thursday in Abuja.
He said cybercrime had become pervasive in the country, adding that every consumer should be protected, except in exceptional cases and that it should be with the permission of the security authorities.
He, however, said operators had been encouraged to embark on the know-your-customer programme as it was very important for customers to be enlightened on what to do when challenges surfaced.
According to Danbatta, at the national level, we have the Nigerian Computer Response Team that is domiciled in the office of the National Security Adviser and put in place in order to secure the Nigerian cyberspace by keeping cyber attacks at bay.
“The strategies that we are recommending are strategies that are easily implantable; they are strategies that will assist citizens on what to do to protect themselves from cyber attacks.
“People, who commit these kinds of crimes take their identities. There is the need to continue to change usernames as well as some authentication that will ensure the security of data,” he said.