NDPC Investigates Remita Over Alleged Data Breach

The Nigeria Data Protection Commission (NDPC) has initiated an investigation into Remita, a prominent payment service provider, over allegations of a data breach. This investigation, confirmed by Babatunde Bamigboy, the head of legal enforcement at the NDPC, was announced on April 1, 2026.

The NDPC requires Remita to provide information related to the suspected breach, which will include an assessment of the type of personal data potentially exposed and the risks posed to data subjects. The investigation will also review the response measures implemented by Remita and will involve Sterling Bank, a stakeholder in the digital payment ecosystem.

Vincent Olatunji, the Chief Executive Officer of the NDPC, stated that companies operating digital payment platforms without adequate safeguards as mandated by the Nigeria Data Protection Act 2023 will face regulatory scrutiny. This investigation comes amid heightened regulatory oversight of digital payment providers in Nigeria, reflecting growing concerns over cybersecurity vulnerabilities that could expose millions of users to potential data breaches.