By Fatima Saka
Abuja — The Nigeria Data Protection Commission (NDPC) has launched an investigation into an alleged data breach involving Remita Payment Services Ltd., Sterling Bank, and other related entities, as concerns grow over data security within Nigeria’s digital financial ecosystem.
According to a statement issued by the Commission, Notices of Investigation were formally served on April 1, 2026, with affected organisations and individuals already cooperating by providing relevant information to aid the probe.
The NDPC said the investigation is aimed at safeguarding data subjects by ensuring that adequate technical and organisational measures are in place to prevent breaches. Key areas under review include the categories of personal data involved, the scale and nature of the alleged breach, potential risks to affected individuals, and the effectiveness of mitigation measures implemented where necessary.
The statement, signed by Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at the Commission, noted that the probe is part of broader efforts to strengthen compliance with the Nigeria Data Protection Act 2023.
It further disclosed that the National Commissioner and Chief Executive Officer of the NDPC, Vincent Olatunji, has directed an expanded review of organisations utilising digital payment systems without fully implementing required data protection safeguards.
Africa CDC Appoints Former Nigerian VP to Shape Global Health Policy, Drive Financing Reforms
The Commission warned that entities found to be in violation of the law would face regulatory actions, as it seeks to uphold the integrity, security, and trust in Nigeria’s rapidly growing digital economy.
The NDPC reaffirmed its commitment to enforcing compliance and protecting citizens’ personal data, urging all data controllers and processors to adhere strictly to provisions of the law.
About The Author
