Nigerian social media users, especially WhatsApp, have been advised to limit the sharing of their sensitive personal information on those platforms, warning that the initial promise (by these platforms) of privacy and security is now being overridden on the bases of business exigency.
The National Information Technology Development Agency gave the warning in a statement by its Head, Corporate Affairs and External Relations, Hadiza Umar.
NITDA said it felt duty-bound to provide the advisory to Nigerians on changes to WhatsApp terms of service and privacy policy which took effect on May 15, 2021.
Millions of Nigerians use WhatsApp platform for business, social, educational and other purposes.
NITDA said it, in collaboration with the African Network of Data Protection Authorities, engaged Facebook Incorporated, owners of WhatsApp, on April 9, 2021 and that as Nigeria’s data privacy regulator, felt the need to advice Nigerians on how Facebook’s business decision affects their privacy rights.
“Facebook acquired WhatsApp in February 2014. Facebook currently has over 2.5 billion users globally, while WhatsApp has over 2 billion users. WhatsApp shared a reviewed Privacy Policy on 4th January 2021, informing its users outside the European Union that it would now share their information with Facebook and its sister companies,” the statement read.
Data/information collected by WhatsApp include account information; messages (including undelivered messages, media forwarding); connections; status information; transactions and payments data; usage and log information; device and connection information; location information; and cookies.
Others include battery level; signal strength; app version; browser information; mobile network; connection information (including phone number, mobile operator or ISP), language and time zone; Internet Protocol address; device operations information; and social media identifiers.
WhatsApp shares these information and with the Facebook company, together with account registration information, details on how users interact with others, mobile device information, Internet Protocol address and location data, among others.
NITDA added: “The Facebook Team confirmed that private messages shared on WhatsApp consumer version are encrypted and not seen by the company, but the metadata (data about the usage of the service) which is also personal information is shared with other members of the Facebook Group.
“WhatsApp users are at liberty to decide on giving consent to the processing of their data based on the new privacy policy. The Nigeria Data Protection Regulation (NDPR) recognizes consent (a clear, unambiguous expression of privacy terms communicated by the controller and accepted by the Data Subject) as one of the lawful basis for data processing.
“Acceptance of the new privacy policy and terms of use implies that user data would now be shared with Facebook and other third parties. Users will now be subject to the terms and policies of Facebook and other receiving entities with or without being direct subscribers to such services.”
NITDA, therefore, advised users that there are other available platforms with similar functionalities which they may wish to explore.
“Nigeria’s engagement with Facebook continues. We have given them our opinion on areas to improve compliance with the NDPR. We have also raised concerns as to the marked difference between the privacy standard applicable in Europe, under the GDPR and the rest of the world,” it said.
The agency said it is working with stakeholders towards exploring all options “to ensure Nigerians do not become victims of digital colonialism.”