Bukola Afeni
The Nigeria Data Protection Commission (NDPC) is investigating an alleged data breach involving Remita Payment Services Ltd., Sterling Bank and other entities, following the issuance of a Notice of Investigation on April 1, 2026.
In the statement signed by Babatunde Bamigboye, Head, Legal, Enforcement and Regulations at the Commission, the Commission said relevant parties and individuals have been providing information as part of efforts to address the incident.
According to the NDPC, the investigation is aimed at ensuring that data subjects are protected with appropriate technical and organisational measures.
“The aim of the investigation is to ensure that data subjects are protected with appropriate technical and organisational measures.
“The investigation by NDPC covers, among others, the types of personal data involved, the nature and scope of the alleged breach, the risk to data subjects and the mitigation measures carried out where a breach is confirmed”, the statement added.
The Commission’s National Commissioner and Chief Executive Officer, Dr Vincent Olatunji, has also directed that organisations using digital payment systems without appropriate technical and organisational measures, as required under the Nigeria Data Protection Act, 2023 (NDP Act), will be examined.
The NDPC said the move is part of a wider effort to ensure the integrity of the ecosystem.
