Cirvee Academy Violates Nigerian Law Playing Data Controller Without Privacy Policy
Cirvee Academy Violates Nigerian Law Playing Data Controller Without Privacy Policy
Publish Date: 2026-06-26 07:47:00
Source Domain: fij.ng
Cirvee Academy, a Nigerian tech academy focused on ‘providing accessible, high-quality education that’s simple to learn’ has been violating Nigeria’s data law on its official website.
FIJ found, on Tuesday, that the tech academy collects personal data from visitors without a publicly displayed privacy policy. Through learning, internship and full-time employment opportunities, Cirvee collects personal data such as: Full name, email address, education status and curriculum vitae.
The type of data collected for learning opportunities
The type of data collected for internship opportunities
The type of data collected for job opportunities
The absence of a privacy policy on Cirvee’s website raises concerns about compliance with Nigerian data protection law, which requires organisations and public institutions to inform individuals about how their personal information will be handled before or at the point of collection.
FIJ’s check through Cirvee Academy’s website on Tuesday
READ ALSO: After FIJ’s Story, Oyo Publishes Privacy Policy on Official Website
WHAT NIGERIA’S DATA LAW SAYS
In line with the Nigeria Data Protection Act (NDPA) 2023, organisations and public institutions acting as data controllers are expected to provide privacy notices to data subjects before or at the point where personal data is collected.
The law requires such notices to state, among other things, the purpose for collecting the data, the legal basis for processing it, the duration for which it will be retained and the rights available to data subjects.
Section 27 of the Act states:
(1) Before a data controller collects personal data directly from a data subject, the data controller shall inform the data subject of the – (a) identity, residence or place of business of, and means of communication with the data controller and its representatives, where necessary;
(b) specific lawful basis of processing under…
