Akara-Wrapped Passport Slip Sparks Outrage: Data Privacy in Nigeria Under Renewed Scrutiny
On June 23, 2025, a disturbing story sent shockwaves across Nigerian social media—one that exposed the fragile state of data privacy in the country. A young Nigerian woman, Oluwadamisi Awe, shared her unsettling experience on X (formerly Twitter): she was contacted via WhatsApp by a stranger who had obtained her passport application slip—a document loaded with personal information—which was bizarrely used to wrap akara (fried bean cakes) purchased from a roadside vendor.
“@NISResponseNG Why is it so easy for someone’s privacy to be breached??! Someone just texted me on WhatsApp with a picture of my passport application slip, and it was used to sell akara. The slip contains every single piece of information about my life rn… This is not even funny. The guy then asked for my pictures on top.”
The sender casually sent her a photo of the slip and then requested personal photos—an invasive and unsettling act that quickly drew widespread outrage. The image displayed her full name, passport number, date of birth, and other sensitive details. Within hours, the story went viral, reigniting national conversations about data security failures in Nigeria.
Nigeria Immigration Service Responds
In response, the Nigeria Immigration Service (NIS)—the agency responsible for processing passport applications—issued a statement via its official X account:
“The Nigeria Immigration Service holds data privacy and protection in the highest regard… However, breaches of this nature are often linked to the involvement of unauthorised third parties such as business cafes or touts.”
The agency warned applicants to avoid using third-party agents or business centers and instead apply directly via the official portal: passport.immigration.gov.ng. They stressed that using unauthorized channels significantly increases the risk of data misuse.
However, this official response did little to calm public outrage. Many argued that the government’s failure to properly regulate and supervise its digital and paper-based systems is at the heart of the crisis.
A Pattern of Data Leaks in Nigeria
Oluwadamisi’s story is far from an isolated case. Nigeria has witnessed several high-profile data leaks and breaches in recent years:
-
In 2024, investigative journalists from FIJ.ng and Paradigm Initiative exposed platforms like XpressVerify.com.ng and AnyVerify.com.ng selling BVNs, NINs, and bank account details of Nigerian citizens for as little as ₦100.
-
Also in 2024, Meta (formerly Facebook) was fined $220 million for unauthorized harvesting of Nigerian user data—showing even global tech giants have mishandled local data.
-
Nigeria ranked fourth in Africa for data breaches in 2024, with over 19.3 million user accounts compromised, according to cybersecurity firm Surfshark. In Q1 2025 alone, another 119,000 accounts were breached.
Fragmented Systems, Real-Life Fallout
Despite new regulations like the 2023 Nigeria Data Protection Act (NDPA) and the 2019 Nigeria Data Protection Regulation (NDPR), enforcement remains inconsistent. Government agencies such as the NIS, NIMC, and NDPC operate in silos, with overlapping roles and limited coordination.
While the NIS has digitized part of its passport process under its Enhanced E-Passport scheme, much of the workflow—particularly around document handling—remains manual and vulnerable. As a result, application slips like Awe’s can easily end up in informal networks, like roadside vendors, when not disposed of securely.
The Human and National Impact of Data Breaches
The implications of these failures are far-reaching and deeply personal.
1. Security Risks
Victims of data breaches often face identity theft, financial scams, and even blackmail. Awe’s experience—being harassed by someone with access to her private data—is not just a breach of privacy but a violation of her personal safety.
2. Erosion of Public Trust
Repeated breaches diminish confidence in institutions like the NIS, banks, and telecommunications providers. When citizens can’t trust the very systems meant to protect their identity, the legitimacy of those institutions weakens.
3. Economic and Diplomatic Repercussions
Nigeria’s poor track record on data governance deters foreign investment, weakens international partnerships, and poses challenges with compliance to global data protection standards like the EU’s GDPR.
What Needs to Change?
Cybersecurity experts and advocacy groups agree: the time for cosmetic reforms is over. Structural and systemic changes must be made to protect Nigerians’ right to privacy.
✅ Define Clear Agency Roles
Government agencies—NIS, NIMC, NDPC, and others—must coordinate on mandate execution, share secure communication platforms, and develop joint incident-response protocols.
✅ Enforce Accountability in Public Sector
Government agencies must be held to the same data protection standards expected from private tech firms. This includes:
-
Mandatory third-party audits
-
Secure disposal protocols
-
Continuous staff training on data handling
✅ Promote Transparency
When breaches occur, institutions must provide the public with a clear explanation of the incident, steps taken to resolve it, and measures to prevent future occurrences.
✅ Strengthen the NDPC
The Nigeria Data Protection Commission needs greater funding, independence, and enforcement power to conduct investigations and hold violators accountable.
The Bottom Line
The image of a passport slip used to wrap akara may feel like satire, but it is an accurate metaphor for how carelessly Nigerian institutions handle citizens’ private information. It also reflects the deep disconnect between digital promises and analog realities in government systems.
As the dust settles on Oluwadamisi Awe’s viral story, one thing is clear: unless reforms are implemented, Nigerians will continue to face exploitation, harassment, and humiliation in a system that too often fails to protect the very people it serves.
Also Read:
-
What You Need to Know About Nigeria’s 2023 Data Protection Act
-
19.3 Million Nigerian Accounts Breached in 2024 – Surfshark Report
Have you experienced a data privacy violation in Nigeria? Share your story or contact the Nigeria Data Protection Commission via ndpc.gov.ng.
