Nigeria Data Protection Commission (NDPC) has launched an investigation into an alleged data breach involving Remita Payment Services Ltd., a commercial bank, and other entities, as part of efforts to safeguard personal data and strengthen trust in Nigeria’s digital ecosystem.
In a statement signed by the Head of Legal, Enforcement and Regulations at the Commission, Babatunde Bamigboye, the NDPC disclosed that a formal Notice of Investigation was served on the affected organisations on April 1, 2026.
According to the Commission, relevant parties and individuals have begun providing information to assist in determining the facts surrounding the incident and to ensure appropriate remedial actions are taken where necessary.
The NDPC stated that the investigation will examine critical aspects of the alleged breach, including the categories of personal data involved, the scope and nature of the incident, potential risks to data subjects, and any mitigation measures already implemented by the organisations.
“The aim of the investigation is to ensure that data subjects are protected with appropriate technical and organisational measures,” the statement said.
The Commission further revealed that the probe is not limited to the entities directly involved, as it will also assess other organisations using digital payment systems without adequate safeguards, in line with provisions of the Nigeria Data Protection Act, 2023.
National Commissioner and Chief Executive Officer of the NDPC, Dr. Vincent Olatunji, has directed a broader review of compliance across the sector to ensure that all operators adhere strictly to data protection regulations.
The move, the Commission noted, is part of a wider effort to preserve the integrity, security, and reliability of Nigeria’s rapidly growing digital payment ecosystem.
The NDPC reiterated its commitment to enforcing data protection laws and ensuring that organisations handling personal data implement robust systems to prevent breaches and protect the rights of Nigerians.
