Confidential information used for company incorporation with Nigeria's Corporate Affairs Commission (CAC) seems to have found its way to the public domain.
The public search database controlled by CAC already exists, but it only includes information such as a company’s RC number, name, address, and date of incorporation.
A couple of seemingly third-party website, on the other hand, include information on the directors and shareholders of companies, as well as their phone numbers and email addresses when they can get them.
According to a data privacy professional we reached out to, the websites contain personal information that is exclusively disclosed to the CAC.
Clause 3.1 of the policy states that:
“Personal information submitted to us through our portal will be used for the purposes specified in this policy or on the relevant pages of the portal.”
The above statement, in addition to Clause 3.3 of the policy, promises not to supply the information provided to third parties for direct marketing.
“We will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party's direct marketing.”
Clause 4.5 states that the CAC “...will not provide your personal information to third parties.”
These websites claim to get their information from public resources and, in the case of NG-Check, government data.
Concerned stakeholders are currently taking necessary steps to bring this to the attention of the CAC and the National Information Technology Development Agency (NITDA). At this time it is unclear what part the CAC plays in this.