The Nigeria Data Protection Commission (NDPC) has commenced an investigation into an alleged data breach involving Remita Payment Services Ltd., Sterling Bank, and other related entities. As part of its regulatory process, the Commission issued a Notice of Investigation on April 1, 2026, with affected parties already cooperating by providing relevant information to aid the inquiry.
The investigation aims to safeguard the rights of data subjects by ensuring that appropriate technical and organisational measures are in place to protect personal data. Key areas under review include the nature and extent of the alleged breach, the categories of personal data involved, potential risks to individuals, and the adequacy of mitigation steps taken where necessary.
Speaking on the development, the NDPC’s National Commissioner and CEO, Dr Vincent Olatunji, emphasized that the probe will also extend to organisations utilising digital payment systems without full compliance with the provisions of the Nigeria Data Protection Act, 2023. He noted that this broader scrutiny is part of ongoing efforts to strengthen trust, accountability, and integrity within Nigeria’s digital ecosystem.
