COURT SAYS BANKS CAN COLLECT MEDIA HANDLES

In a decision with potential implications for customer privacy, the Federal High Court sitting in Lagos has upheld the Central Bank of Nigeria’s (CBN) regulation requiring financial institutions to collect social media handles as part of their Know-Your-Customer (KYC) procedures.

The case centered around a plaintiff who argued that the CBN regulation infringed on their right to privacy.

However, Justice Nnamdi Dimgba struck out a suit filed by a Lagos-based lawyer, Chris Eke, seeking a declaration that the regulation as contained in Section 6(a)(iv) of the Central Bank of Nigeria (Customer Due Diligence) Regulations, 2023, said it is undemocratic, unconstitutional, null and void, to the extent of its inconsistency with Section 37 of the 1999 Constitution of the Federal Republic of Nigeria (as amended).

The judge further argued that social media profiles are inherently public-facing, suggesting that collecting this information doesn’t constitute a privacy violation.

The CBN in its response to the suit, filed a notice of preliminary objection, challenging the competence of the suit. The apex bank also disagreed that the said regulation constitutes any interference with the private life of the applicant, as claimed.

In his judgment, Justice Dimgba held that the notice of preliminary objection had merit, and he subsequently struck out the suit.

The judge said in his view, the provision of a social media handle is the same as the provision of email address, phone numbers and other means by which a potential customer of a bank can be contacted and or due diligence, to determine if the person is a fit and proper person for the bank to do business with, and as such, the regulation does not amount to an infringement on the right to privacy.

According to Justice Dimgba, the essence of having a social media account was for one to be publicly visible communication-wise, and it would be highly unreasonable to hold the CBN in breach of privacy for it.

The judge held that “First, the Applicant claims that the requirements on the CBN Regulations for financial institutions to request and collect the social media handle of its customers as part of KYC infringes on his right to privacy.”

“This claim is very ambitious and amounts to a very far throw. The said Regulations are directed to and apply to financial institutions. It does not apply to private individuals such as the Applicant.

“Even if, as appears to be argued, that the Regulations itself would inevitably affect the Applicant, this claim is speculative for the simple reason that in nowhere in the affidavit in support was it stated that the Applicant operates an account with a financial institution and that the said institution had demanded his social media handle. So the suggestion that he would be affected by this Regulation, albeit negatively, is very speculative and at large.

“Secondly, there is also no deposition to the effect that any financial institution had begun to implement this Regulation and that its implementation had begun to create disruptions and inconvenience against the general population, in which case one could infer that the suit should be legitimated as a public interest litigation.

“Thirdly, assuming even that the banks had begun to implement these regulations, the applicant assuming he maintained any bank accounts or sought to open one, but is being hindered or irritated by the requirement of the Regulation to avail his social media handle as part of KYC, the Applicant still had a choice, which is to refuse to do business with any bank insisting on the information as part of its social media handle, but to seek other alternatives.

“Fourthly, and for all it is worth, I do not see how asking a banking or potential banking customer to provide his social media handle can ever amount to a breach of privacy.

“I do not see how this infringes on the right to privacy. I should even say that the essence of having a social media account was for one to be publicly visible communication-wise. It, therefore, appears quite ironic, though wryly, that one can suggest that asking for information about a social media handle with which the individual exposes and immerses himself or herself in the public, can amount to a violation of privacy rights, which rights itself is all about isolation of one from public glare.

“A social media handle is left at large for the world to see, being in the public space, everyone enjoys the liberty to have access to it whether or not consent was obtained. It would be highly unreasonable to hold the Respondent in breach of privacy for what other persons have access to.

“On the whole, if I did not sustain the NPO, I would have dismissed the suit for the reasons stated. But the NPO having been sustained, the suit is therefore hereby struck out.”