These websites expose private CAC details of company directors, shareholders

by | Oct 23, 2019

Confidential information used for company incorporation with Nigeria’s Corporate Affairs Commission (CAC) seems to have found its way to the public domain.

The public search database controlled by CAC already exists, but it only includes information such as a company’s RC number, name, address, and date of incorporation.

CAC Dangote

A screenshot of the search for Dangote’s incorporation on CAC

A couple of seemingly third-party website, on the other hand, include information on the directors and shareholders of companies, as well as their phone numbers and email addresses when they can get them.

dangote cement

A corresponding search for Dangote Cement’s incorporation on ng-check.com, one of the websites in question

The websites in question include ng-check.com, ngcorporates.com and nigeria24.net. However, nigeria24.net is no longer reachable.

Advertisement

Violation of the CAC Privacy Policy

According to a data privacy professional we reached out to, the websites contain personal information that is exclusively disclosed to the CAC.

Since the information gotten is usually disclosed to the CAC in the course of incorporating business entities in Nigeria, our data privacy professional highlighted various issues present and the privacy policy on the CAC website.

Clause 3.1 of the policy states that:

“Personal information submitted to us through our portal will be used for the purposes specified in this policy or on the relevant pages of the portal.”

The above statement, in addition to Clause 3.3 of the policy, promises not to supply the information provided to third parties for direct marketing.

“We will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party’s direct marketing.”

Clause 4.5  states that the CAC “…will not provide your personal information to third parties.”

CAC Privacy Policy Third Party Highlight

The CAC’s stance on third parties.

According to the data privacy professional, this means the third parties may have unfettered access to more information submitted at the point of incorporation, which could be used for malicious purposes — a clear violation of the CAC Privacy Policy.

Advertisement

Further research reveals that these websites have little to no policy on data privacy to protect the data of companies listed. Just one — NG Corporates — has a brief privacy policy, which protects the visitors to the site, but not the companies or persons listed.

These websites claim to get their information from public resources and, in the case of NG-Check, government data.

Concerned stakeholders are currently taking necessary steps to bring this to the attention of the CAC and the National Information Technology Development Agency (NITDA). At this time it is unclear what part the CAC plays in this.

Udoka Chiefe
Udoka Chiefe

Writer | Learner| Technologist

Interested in technology, law and new discoveries.

On January 22, 2022, be part of the largest gathering of innovators, startup founders, thinkers, programmers, policymakers, and investors in West Africa. Register free.

Subscribe
Notify of
guest
3 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments
Sam
Sam
2 months ago

The CAC is so shameless. I just saw all my company details displayed for the world to see on another site btbhint.com. How can a Federal Agency not have security controls in place?? I can’t even imagine the horrible things some fraudsters are doing with the our private information.
This article is over 2 years old and CAC has still not made any moves in taking down these sites.
These are some of the things that make me want to jettison this country called Nigeria!

Akuna
Akuna
2 months ago

Thank you for this great article, I saw my company details on nigeria24.me formerly nigeria24.net and b2bhint and honestly it’s theft, stealing people’s information without contacting them first…. There has to be an end to this….

Akuna
Akuna
2 months ago

Thank you thankpoint Africa and Udoka Chiefe for your logical analysis of the matter & bringing it to public notice

Recent News

Subscribe to Techpoint Digest!

A daily 5-minute roundup of happenings in African and global tech, sent directly to your email inbox, between 5 a.m. and 7 a.m (WAT) every week day!

Please check your email to confirm your subscription.

Subscribe to Crypto Explorer

A monthly series featuring in-depth analysis on the cryptocurrency sector in Africa

Please check your email to confirm your subscription.

Subscribe to The Experts

A bi-weekly where tech career specialists take us on their journey from newbie to expert, and how they became successful in the industry.

Please check your email to confirm your subscription.

Subscribe to Founder's Table

A monthly series, where we catch up with founders in the startup ecosystem, learn about their failures, successes and a few tricks of the trade

Please check your email to confirm your subscription.

Copy link
Powered by Social Snap