
The Nigeria Data Protection Commission (NDPC) has announced that it is conducting an investigation into a purported data breach involving Remita Payment Services Ltd., Sterling Bank, and other associated entities.
A statement issued by Babatunde Bamigboye, Esq., Head of Legal, Enforcement Regulations at NDPC, indicated that a Notice of Investigation has been properly served to the firms concerned.
“Relevant parties and individuals have been supplying information to address the incident,” the statement noted.
The statement further elaborated that the objective of the investigation is to ensure that data subjects are safeguarded through suitable technical and organizational measures.
It specified that the NDPC’s investigation encompasses, among other aspects, the types of personal data implicated, the nature and extent of the alleged breach, the risks posed to data subjects, and the mitigation measures implemented if a breach is confirmed.
Additionally, it was mentioned that the Commission’s National Commissioner/CEO, Dr. Vincent Olatunji, has instructed that organizations utilizing digital payment systems without establishing the necessary technical and organizational measures as required by the Nigeria Data Protection Act, 2023 (NDP Act), will also be scrutinized as part of a broader initiative to uphold the integrity of the ecosystem.
Data protection: NDPC investigates Remita, Sterling Bank over alleged data breach