Expert Raises Alarm Over Low Awareness of Personal Data Protection in Nigeria
Speaking during an interview on Nigeria’s cybersecurity challenges, Aston said many internet users unknowingly put themselves at risk by sharing sensitive information online without understanding how cybercriminals can exploit such data.
According to her, cyber attackers often rely on publicly available information such as names, phone numbers, social media activities, and personal details to create profiles of potential victims and carry out targeted attacks.
She noted that many Nigerians still fail to recognise the value and sensitivity of personal information, including certificates, phone numbers, and email addresses, despite the security risks attached to such data.
Aston cited cases where personal records and certificates shared on social media were later used for unauthorised purposes, stressing that even a single image posted online can reveal critical information about a person’s educational background, profession, and identity.
The cybersecurity specialist also criticised some businesses for collecting excessive customer information without clear justification or adequate security measures, noting that unnecessary data collection has become a widespread practice.
She expressed concerns over low compliance levels among many small businesses operating mainly through social media platforms, questioning whether such organisations fully understand their obligations under Nigeria’s data protection regulations.
Aston further warned that weak public awareness has encouraged risky digital behaviour, with many individuals willingly exchanging personal information for small incentives without considering the long-term implications.
She called for stronger grassroots sensitisation campaigns, improved enforcement of data protection laws, and increased public education on digital rights and reporting channels for data breaches.
According to her, organisations must begin treating customer data protection not only as a legal obligation but also as a core component of responsible service delivery and public trust.
