NDPC probes alleged data breach involving Remita, Sterling Bank, others

The Nigeria Data Protection Commission (NDPC) has begun investigation into an alleged data breach involving Remita Payment Services Ltd., Sterling Bank and other institutions.

Mr Babatunde Bamigboye, Head, Legal, Enforcement and Regulations at NDPC, said this in a statement on Monday.

Bamigboye said a notice of investigation was duly served on April 1, in line with the commission’s procedures.

According to him, relevant parties and individuals have since been providing information to aid the investigation and address the incident.

He stressed that the investigation aims to ensure that data subjects are protected with appropriate technical and organisational measures.

“The investigation by NDPC covers, among others, the types of personal data involved, the nature and scope of the alleged breach, the risk to data subjects and the mitigation measures carried out where a breach is confirmed,” he said.

The National Commissioner of NDPC, Dr Vincent Olatunji, also said that organisations deploying digital payment systems without adequate safeguards would come under scrutiny.

He added that such measures were mandated under the Nigeria Data Protection Act 2023 as part of efforts to ensure the integrity of the ecosystem.