By Kingsley I. Ilechukwu, Bureau Chief, South West, Nigeria
The Nigeria Data Protection Commission (NDPC) is embarking on an investigation into an alleged data breach involving Remita Payment Services Ltd., Sterling Bank and other entities, Cyber Era NG learns.
The foregoing is according to a press statement e-signed on behalf of NDPC by its Head, Legal, Enforcement & Regulations, Babatunde Bamigboye, Esq.
We gather that pursuant with the Commission’s procedure, Notice of Investigation was duly served on April 1, 2026 and relevant parties and individuals have been providing information for the purpose of addressing the incident.
As per the NDPC statement, “the aim of the investigation is to ensure that data subjects are protected with appropriate technical and organisational measures. The investigation by NDPC covers, among others, the types of personal data involved, the nature and scope of the alleged breach, the risk to data subjects and the mitigation measures carried out where a breach is confirmed.”
We understand that the Commission’s National Commissioner/CEO, Dr. Vincent Olatunji, has directed that organisations that employ digital payment systems without putting in place appropriate technical and organisational measures as mandated under the Nigeria Data Protection Act, 2023 (NDP Act), will also be examined as part of a wider effort to ensure the integrity of the ecosystem.
