SERAP Sues CBN Over Regulations On Customers’ Social Media Handles

Socio-Economic Rights and Accountability Project (SERAP) has filed a lawsuit against the Central Bank of Nigeria (CBN) over its failure to delete the patent provisions in the apex bank Customer Due Diligence Regulations directing banks to obtain information on customers’ social media handles for the purpose of identification.

The CBN had last month issued a Clcircular mandating banks and other financial institutions to implement and comply with the mandatory provisions on customers’ social media handles in the CBN Regulations.

THE WHISTLER recalls that SERAP last month had threatened to sue the CBN over the new Regulations.

In the suit number FHC/L/CS/1410/2023 filed last Friday at the Federal High Court in Lagos, SERAP is seeking an order of mandamus to direct and compel the CBN to withdraw its directive dated June 20, 2023 to banks and other financial institutions to obtain information from customers’ social media handles.

SERAP is also seeking an order of mandamus to compel the apex bank to delete the provisions of Section 6 of its Customer Due Diligence Regulations, 2023 for being inconsistent with Section 39 of the Nigerian Constitution 1999 [as amended] and Article 9 of the African Charter on Human and Peoples’ Rights.

The organisation is also seeking an order restraining the CBN from carrying out or giving effect to the provisions of the Section 6.

In the suit, SERAP is arguing that the mandatory requirement of social media handles or addresses of customers does not serve any legitimate aim, adding that such information may be used to unjustifiably or arbitrarily restrict the rights to freedom of expression and privacy.

SERAP is also arguing that unless the reliefs sought are granted, the CBN will implement and enforce the directive in contravention of citizens’ rights to freedom of expression and privacy.

According to SERAP, there are other means of identification such as passport, driver’s licence, Bank Verification Number (BVN), and Tax Identification Number (TIN), which banks and other financial institutions already require their customers to provide.

SERAP is also arguing that the additional requirement of obtaining details of a customer’s social media handle or address fails to meet the requirements of legality, necessity, and proportionality.

SERAP is further arguing that the facts that there are sufficient means of identification for CBN, banks and other financial institutions to rely on to meet the requirement of Know Your Customer also heighten concerns of overreach, and confer far-reaching discretion on banks and financial institutions.

The suit filed on behalf of SERAP by its lawyers, Kolawole Oluwadare and Ms Blessing Ogwuche, read in part: “Obtaining information on customers’ social media handles or addresses as means of identification is more intrusive than necessary.”

“According to Section 6(a)(iv) of the CBN Regulations, banks and other financial institutions ‘shall identify their customer and obtain information on the social media handle of the customer.’ Section 6(b)(iii) contains similar provision.”

“The purported mandatory requirement would inhibit Nigerians from freely exercising their human rights online. If obtained, such information may also be misused for political and other unlawful purposes.”

“The CBN Regulations and directive to banks and other financial institutions would impermissibly restrict the constitutional and international rights to freedom of expression, privacy and victims’ right to justice and effective remedies.”

“Requiring social media handles or addresses of customers as a means of identification would have a disproportionate chilling effect on the effective enjoyment by Nigerians of their rights to freedom of expression and privacy online.”

“The requirement of necessity implies an assessment of the proportionality of the grounds, with the aim of ensuring that the excuse of ‘regulations on customer due diligence’ is not used as a pretext to unduly intrude upon the rights to freedom of expression and privacy.”

“The CBN Regulation does not demonstrate how the use of social media handle or address as a means of identification would serve to improve banks and other financial institutions’ ability to implement and comply with the laws and regulations relating to customer due diligence.”

“The Directive by the CBN, which does not in any event carry the force of law, also fails to provide any explanation as to how social media handles or addresses can facilitate compliance with regulations relating to customer due diligence.”