Tosin Lewis, you are welcome.
Thank you YJ it’s my pleasure to be here.
Section 37 of the constitution of the Federal Republic of Nigeria guarantees the privacy of citizens, their homes, correspondence, telephone conversations and telegraphic communications. It says those rights are guaranteed and protected. We have several other legislation that also sure up that provision of the constitution. So constitutionally yes. These things are guaranteed and protected but whether in reality that protection exists is a totally different kettle of fish.
I think that is the key point, in reality, because in everyday walks of life. Do you think the constitution at the time it was set and that clause, you said section 37 was set, did they have internet in mind? Did they have the privacy issues we deal with today in mind? Even if they didn’t have them in mind could they actually be relevant to those issues?
Are you serious?
Yes. I heard a voice cut into a call I was making and realized that there were four of us on that line. Our calls had just somehow gotten caught up together.
And so when we talk about privacy, really, how private are we going to be talking about?
But then in then outer world, taking that particular stance, everywhere else in the world they have a policy, which when you read it, it has a k-leg in it, it says I will use it for third parties or marketing purposes and they have built that into whatever policy. But I find that in Nigeria the policy might say that you are not going to use it. There may not even be a policy. A few years back. Do you remember when in, uhmm, if you went to Ikeja, the tech village in Ikeja, you could buy CDs of peoples GSM numbers and stuff like that. How does all that figure?
Now, let’s look at this from two different angles. You spoke about how you could buy a CD of peoples GSM numbers, the same way till today you could buy something online in Nigeria that will give you the database of people their phone numbers, emails and whatever.
So have those people consented?
If you look at the law in terms of telecommunications in Nigeria, the licenses that are being given out, part of the law is that the owner of that license is obliged to have a directory in place of all subscribers.
A subscriber is entitled on demand to receive that directory.
The entire one?
The only way you or I can get our names out of that directory is to opt out.
Which most of us don’t?
Most of don’t even have a clue that the directory exists or that we need to opt out to get our names out of that directory.
That is a revelation.
That is one thing. So it is easy for a subscriber to get that directory and then do whatever he wants with it, in a poorly regulated society. Then when we look at emails. We all go to these events. We go to book launches. We go to seminars. We go to conferences. Where ever we go we put down our names and our email address, sometimes we put down out phone numbers. Nobody really asks the questions what is going to be done with this. If every day I receive spam email on a daily basis, before I get hot under the collar, I need to ask myself did I at any given point in time put down my email for these people to use. Now let’s say you run four companies. And one of your companies, I come to your company A the year 2010. You’re having a seminar and I put down my email and I think that’s it. And then in the year 2017 you rebrand. It’s still the same company and you decide that you have a product that you want to push out and you look at your list of everyone who has ever provided an email, that email is going to be on their and they are going to push that product to me by email and I am going to think that it is spam because I can’t even remember that ten years ago I ever put down my email with you, I don’t know you rebranded and probably have a new name. So while we get all these spam emails not all of them have been bought, some of them somewhere along the line we have consented, although we did not know it.
OK! I get what you are saying. So in a way all this new GDPR stuff is actually in our favor although it may not necessarily be relevant to where we are in Nigeria or in Africa.
I do think it is relevant. I think it is extremely relevant.
But I thought it was for EU citizens.
The GDPR is for EU citizens and for anyone who sells a product or service to someone in the EU.
Now if in Nigeria, if you run a website selling products and you have not blocked all, what do you guys call it, IP addresses from then EU and someone comes in from the EU onto your websites, purchases something or tries to download something and puts their email there, you are caught by the GDPR regulations.
Does that also apply to people who are preexisting on your database?
Not that I know of. There might be but I am not aware of any moves right now by the legislators.
Is what we have sufficient?
Even down to the individual. You pointed telecommunication, you are on a call, and someone butts in. There is nothing you can do. You send an email. Your address is there. Someone can harvest it and use it anyway you like and the most surprising one is that one about the directory. So do we really need any further protection even though we have none already?
Contract outside the law. What is that?
That means if there is a law that says X, you and I cannot agree to bypass X.
They would say that under the law they are obliged to create this directory, so if you do not opt out…
Your data will be available for exposure.
Who is going to take me to task?
The person who says you contravene.
In which country?
Where it says you contravene. Like we talked about GDPR, applies to EU, or to people resident in the EU or to anyone who is selling a product or service to someone in the EU, regardless of the fact that that person is not in the EU.
So the EU will then be able to find me in Nigeria? They can find me?
If I wanted to prove a point.
But I would say before anyone would jump up and start trying to sue people for breach of privacy, like I had said before, take your time and if you can do a trace back, you need to be very sure you have not consented to the use of that email.
Okay. That’s good.
Because we do it, it is very routine for us. We go somewhere, at the registration table and put in your email.
Yes it is.
We need to download a freebie online; you put in your email.
Okay that’s true.
At times it gets to be a lot and you are not able to join or connect your dots, because maybe you did it four, five years ago and you can’t remember. Before you jump up, screaming blue murder trying to get a law suit going and whatever, take a step back, be very sure that you are on the right track.
Hmm! That’s good actually. Do you think that Nigerians understand that they actually have a right over their personal data? Because it’s true, I have been to many events I have done it exactly, I have signed up and I never even thought about what they are going to do with it. Do you think, maybe, we just don’t really understand we should control how much data we put out.
I think it is one of the factors that has led to this, is the way the authorities themselves treat our data. To get anything done in Nigeria, we go to the bank we have to input your data. Every single time we go into the bank, for one reason or another, we have to input our data. We have to put in your BVN, your whatever, submit your copies of your passport or your driving license. You need to do your passport, your international passport you go through the submit all that data again. You need to renew your driver’s license, you do all that. Whatever it is you need to do, you keep on putting all this data out.
So it’s become a habit?
It’s become a habit. We keep on hearing about a national database. As far as I am concerned it does not exist because if it did I would not need to keep on supplying the same information over and over again. So it’s like we have been conditioned, we been conditioned that once they put a form in front of us, to put in the data and never step back and say what is going to happen to all this data I am putting out here. It stems from the way the society has been structured. The way the authorities are managed right here in Nigeria.