Nigeria's data protection regulator has launched an investigation into a suspected data breach within the country's digital payments ecosystem. The Nigeria Data Protection Commission (NDPC) confirmed it issued a formal notice of investigation on April 1 and is gathering information from companies and individuals connected to the incident. The probe will assess the type of personal data potentially exposed, the extent of the breach, and whether affected organisations took appropriate steps to contain it. Regulators are focusing on compliance with the Nigeria Data Protection Act 2023, which mandates strict safeguards against unauthorised access or misuse of personal data. Vincent Olatunji, the NDPC's chief executive, has also initiated a broader review of organisations using digital payment systems but may not be fully compliant with data protection rules. This suggests the investigation could expand beyond the initial case, leading to wider enforcement across the fintech sector. The move reflects growing regulatory scrutiny as Nigeria's digital transaction volume rises and concerns mount over how financial technology firms manage sensitive customer information. Penalties for violations vary based on breach severity but may include fines and mandatory corrective actions. With fintech platforms handling increasing amounts of personal and financial data, the outcome could influence how companies prioritise cybersecurity amid rapid growth and stiff competition.
The investigation signals a shift from reactive oversight to proactive enforcement in Nigeria's digital finance space. Rather than targeting a single company, the NDPC is using a potential breach as a catalyst to audit the wider ecosystem, including firms that may have flown under the radar. This approach could pressure even compliant platforms like Paystack or Flutterwave to reassess their data governance, not just for customer trust but to stay ahead of tightening rules. If sustained, this level of scrutiny may redefine what it means to operate in Nigeria's fintech market—where growth can no longer outpace accountability.
