The Nigeria Data Protection Commission (NDPC) has commenced an investigation into a suspected data breach involving Remita Payment Services Ltd., Sterling Bank, and other entities within the digital payments ecosystem.
The development was confirmed by Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at the NDPC, in an official statement released in Abuja.
According to Bamigboye, the commission issued a formal notice of investigation on April 1 , in line with established regulatory procedures.
He said affected organisations and relevant stakeholders have begun submitting information to support the inquiry and help determine the scope of the incident.
The NDPC noted that the investigation will examine critical issues, including the type of personal data potentially exposed, the extent of the breach, associated risks to individuals, and any mitigation measures already implemented.
Bamigboye emphasised that the process is aimed at ensuring that data subjects are adequately protected through appropriate technical and organisational safeguards.
Meanwhile, the National Commissioner of the NDPC, Dr Vincent Olatunji, warned that organisations handling digital payment systems without sufficient data protection measures would face regulatory scrutiny.
He reiterated that compliance with the Nigeria Data Protection Act 2023 remains mandatory for all entities operating within the country’s digital ecosystem.
The commission’s action highlights growing concerns around data privacy in Nigeria, especially as digital financial services continue to expand rapidly.
