Nigeria’s data protection regulator has opened an investigation into an alleged breach involving parts of the country’s digital payments ecosystem, in a move that could widen scrutiny of how financial technology firms handle customer information.
The Nigeria Data Protection Commission (NDPC) said it issued a formal notice of investigation on April 1 and has begun collecting information from relevant companies and individuals linked to the incident.
Read also: NDPC warns content creators against filming Nigerians without consent
The probe will examine the type of personal data potentially exposed, the scale and nature of the breach, and the risks to affected users. It will also assess whether adequate steps were taken to contain the incident where a breach is confirmed.
Regulators are increasingly concerned about the growing volume of sensitive financial data handled by payment platforms, especially as Nigeria pushes deeper into digital transactions. The investigation is aimed at ensuring that companies adopt proper technical and organisational safeguards to protect users.
Vincent Olatunji, the commission’s chief executive, has also ordered a broader review of organisations that rely on digital payment systems but may not be fully compliant with data protection rules. That signals the inquiry could extend beyond the initial case and trigger enforcement actions across the sector.
Read also: NDPC launches probe into Temu over alleged data protection breach
Under the Nigeria Data Protection Act 2023, companies are required to implement strict controls to prevent unauthorised access, loss or misuse of personal data. Violations can attract penalties and corrective measures, depending on the severity of the breach.
The latest move highlights rising regulatory pressure on Nigeria’s fast-growing fintech industry, where rapid expansion has sometimes outpaced internal controls. Analysts say increased enforcement could force firms to invest more in cybersecurity and compliance, even as competition intensifies.
For users, the outcome of the probe may determine how well their financial and personal data is protected in an increasingly digital economy.