Connect with us

E-Business

Experts Advise African Firms Processing EU Personal Data

Published

on

Kindly share this post

A piece of advice has been given to organisations in Africa processing the personal information of data subjects from within the European Union (EU).

 

At an event hosted by Baker McKenzie and Cognia Law in Johannesburg, Head of the Technology, Media and Telecommunications Practice Group at Baker McKenzie in Johannesburg, Mr Darryl Bernstein, warned organisations doing such to already have effective General Data Protection Regulation (GDPR) compliance procedures in place, including Data Breach Security Checklists, impact assessments and subject data requests procedures.

 

Mr Bernstein said this due diligence is not only required by the GDPR regulation but can significantly reduce the risks associated with security breaches, raise awareness of the GDPR and ensure that companies have appropriate technical and organisational measures in place to comply with the legislation.

 

He further said it was essential for organisations to have a General Data Protection Regulation (GDPR) Data Security Breach Checklist in place to assess the risks of a data security breach and to implement a plan to contain and manage any data breaches.

 

Mr Bernstein noted that the first step on any organisation’s GDPR Data Security Breach Checklist should be to assess the risks associated with a data security breach.

 

“It is essential to know whose data might have been disclosed, what type of data has been breached and if it contains sensitive information.

 

“Affected organisations should also asses the volume of data disclosed and if any of the data has been lost or damaged. The cause of the breach and where in the world the breach occurred must also be investigated,” he said.

 

Mr Bernstein explained that step two on the Checklist should be to contain the breach and recover the data.

 

“Organisations who have fallen victim to a data breach must establish who will investigate the breach, who will assist with the containment of the breach and/or the recovery of information and if action should also be taken to prevent the breach from recurring. This is also the time to inform the police, if appropriate to do so,” the data expert said.

 

During step three, organisations must notify all data subjects who have had their private information breached.

 

“According to the GDPR, notification must take place without undue delay and no later than 72 hours after the breach has occurred. The nature and scope of the breach, as well as its consequences and the measures taken to rectify it, must also be disclosed to affected data subjects,” he said.

 

Mr Bernstein explained that South African organisations will have to have a similar checklist in place in order to comply to the soon to be implemented Protection of Personal Information Act (POPIA).

 

POPIA stipulates that a data breach must be notified as soon as reasonably possible after the discovery of the compromise, considering the legitimate needs of law enforcement or any measures reasonably necessary to determine the scope of the compromise and to restore the integrity of the responsible party’s information system.

 

To assist organisations in the event of a data breach, Baker McKenzie recently launched a mobile application called “Data Breach 72”. This app, which is available in English and French, allows organisations to identify the existence of a data breach, within the scope of application of the GDPR; establish whether it is necessary to notify the competent supervisory body; and prepare an initial draft of this notification. The app forms part of Baker McKenzie’s innovation programme, which aims to rethink the way in which lawyers deal with the challenges their clients are facing.

 

The final step in Checklist includes a thorough evaluation of the breach. “Once the first three steps are complete, organisations must investigate whether employees were responsible for the breach and if disciplinary action is required. If a third party was involved, the contract should be checked for damages provisions and an impact assessment undertaken. Lastly, organisations must review their procedures and ensure their data is secure going forward,” he said.

 

Also, partner in Baker McKenzie’s Corporate/M&A practice and TMT specialist, Janet MacKenzie, noted that, “The GDPR further requires organisations to complete a Data Protection Impact Assessment prior to the processing of private information, where the processing is likely to result in a high risk to the rights and freedoms of natural persons.

 

MacKenzie said it is essential to conduct an Impact Assessment of third parties that process high-risk company personal data, to determine their awareness of GDPR and to ensure that they have appropriate technical and organisational measures in place to comply with the legislation.

 

For high-risk third parties, audit partners should be identified for the assessment of processes and to determine if on-site audits are required. It is worth noting that the requirements of the GDPR stipulate that data processing can only be outsourced to a third party if the processor guarantees conformity with the requirements of the GDPR.

 

Janet Taylor Hall, CEO of Cognia Law, explained further, “There were two operational areas where clients tend to underestimate the impact assessment efforts around GDPR –  the first being adequately preparing to deal with a data breach when it happens and the second is subject data requests, which can in themselves lead to a breach if not handled appropriately.”

 

“Right of access is a core principle of the GDPR. Individuals have the right to access their personal data and supplementary information at any time. In responding to these data requests in time (30 days), it is also important that no data is shared that belongs to another individual or that contains intellectual property or trade secrets,” she said.

 

“Putting a robust subject data request capability in place is an important part of the on-going GDPR compliance support we offer our clients”, highlighted Justin Ridl, Global Head of Legal Services, Cognia Law.

 

 

 

 

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

NIPOST Plans Digital Postcodes for Every Building in Nigeria

Published

on

Kindly share this post

Nigerian Postal Service (NIPOST) has reaffirmed its commitment to implementing a National Digital Postcode System to assign a unique digital address to every addressable building across the country.

NIPOST Plans Digital Postcodes for Every Building in Nigeria

Speaking at the unveiling of the Post Code Delineation Model Validation 2026 in Abuja, Tola Odeyemi, postmaster general and chief executive officer, NIPOST, said the initiative would establish a machine-readable standard location-address framework for buildings nationwide.

“Postcode is basically a framework used to have a machine-readable standard location address for every addressable building in Nigeria,” Odeyemi said.

She explained that the project would place Nigeria among the first countries in Africa to develop a postcode system down to the unit level, ensuring that each standing building is assigned a unique code.

According to her, the digital postcode system is expected to enhance service delivery, logistics operations, emergency response, and national planning by improving the identification of locations across the country.

Odeyemi noted that the diversity of Nigeria’s geography necessitated different approaches to address mapping and postcode allocation.

“Nigeria is a large country. We have all the way from the top of Nigeria, which is almost like the Sahel, to the Savannah, to the Middle Belt, to the tropical South and even to the riverine areas.

“The logic that will work for Jigawa is not the same logic that will work for Bayelsa because they have completely different geographical expressions, density of buildings, population distribution, and topography,” she said.

She said the postcode delineation process was designed to ensure that postcode boundaries align with existing administrative structures and do not overlap local government boundaries.

“Delineation has to make sure the postcode does not pass administrative boundaries, and it must not go across two local government areas,” Odeyemi stated.

The NIPOST boss further explained that the validation exercise involves testing aerially mapped polygons against actual settlement patterns and geographical realities in different parts of the country.

“To test the polygons we have drawn aerially, we must ensure they accurately reflect realities on the ground. For example, the density of buildings in Lagos, particularly in Mushin, is very different from the density of buildings in Abuja. We are making sure that density maps and topographical features are properly captured for each state in Nigeria,” she said.

She described the Post Code Delineation Model Validation exercise as a critical stage in the agency’s broader digital addressing initiative, which seeks to create a comprehensive and standardised postcode framework for the country.

Nigeria has long grappled with an inefficient addressing system, making it difficult to accurately identify locations for postal services, logistics, emergency response, and public planning.

NIPOST’s National Digital Postcode System is part of efforts to create a standardised and technology-driven addressing framework that assigns a unique code to every addressable building in the country.


Kindly share this post
Continue Reading

E-Business

The Case for a Holistic AI-Led Approach to Cybersecurity in the Fintech Ecosystem

Published

on

Kindly share this post

As digital financial services continue to grow globally, cyber threats are becoming more advanced, more automated, and more financially damaging. In Nigeria, where digital payments are becoming a part of everyday life, these threats pose significant risks to both consumers and financial institutions.

Industry reports continue to show that account takeover remains one of the dominant fraud issues in Nigeria, accounting for a significant share of 43% banking-related losses reported to Nigeria Inter-Bank Settlement System (NIBSS). Between early 2023 and mid-2025, the financial sector is estimated to have lost hundreds of billions of naira to digital fraud, while 281,500  user accounts have been exposed through breaches and leaks in Q1 alone.

Responding to this kind of threat environment requires more than a single line of defence. It requires a broader security model that combines intelligence, automation, identity verification, and ecosystem collaboration.

PalmPay, leading digital payments platform, has built its cybersecurity framework on a multi-layered security architecture designed to anticipate, detect, and mitigate risks before they escalate. Rather than relying on a single line of defence, PalmPay integrates AI-driven fraud monitoring, continuous risk assessment, behavioural analysis, and multi-layer authentication to strengthen account protection.

One important part of this approach is biometric and facial verification. As account takeover attempts increasingly exploit stolen credentials, identity verification has become one of the most effective tools in combating fraud. By combining facial verification with PIN and OTP authentication, PalmPay introduces multiple layers of protection that help ensure access is tied to the legitimate account owner, significantly reducing the risk of unauthorized access.

Complementing this is PalmPay’s Fraud Case Management System that enhances how potential fraud incidents are detected, analysed, and managed. By centralising fraud intelligence and enabling faster response times, the system helps security teams identify emerging patterns and intervene more proactively.

PalmPay’s Anti-Fraud Manager, Omoruyi Aiyudu, commented: “Fraud prevention today requires a shift from isolated security controls to a connected, intelligence-driven security ecosystem. At PalmPay, we leverage AI-driven fraud detection, behavioural analytics, and multi-layered authentication to identify and mitigate risks in real time. We continue to invest in advanced technologies to strengthen account security and build a safer, more resilient digital financial ecosystem for our users.”

Ecosystem Collaboration

Cybersecurity does not stop at internal controls. Stronger outcomes also depend on collaboration across the wider financial ecosystems.

PalmPay continues to work with regulators, law enforcement agencies and other stakeholders to support stronger cybercrime detection and response capabilities. One example is collaboration with the Nigerian Cybersecurity Unit of the Nigeria Police Force (NPF), including support through the provision of advanced equipment designed to enhance fraud detection and investigation capacity.

The company also recently collaborated with the Nigerian Data Protection Commission on a specialized data protection training to enhance internal data governance practices and advance compliance with the Nigeria Data Protection Act (NDPA) 2023.

These efforts reflect a broader view of security, one that recognizes that customer protection depends not only on technology, but also on governance, institutional cooperation, and responsible data handling.

PalmPay also believes that effective cybersecurity requires active participation from every stakeholder in the digital ecosystem. This is why user awareness remains an important part of its approach. Technology can reduce risk, but informed behaviour remains one of the strongest protections against fraud.

As cyber threats continue to evolve, the future of cybersecurity will depend on organisations adopting intelligent, adaptive, and collaborative security models. AI-led security solutions are no longer optional; they are becoming essential to staying ahead of increasingly sophisticated threats, strengthening customer trust, and the digital economy.


Kindly share this post
Continue Reading

E-Business

Galaxy Backbone @ 20, Pledges Nationwide Connectivity, Data Sovereignty

Published

on

Kindly share this post

Galaxy Backbone (GBB) Limited has mapped out strategies to strengthen Nigeria’s digital infrastructure in order to make the country globally competitive in the face of Artificial intelligence, blockchain, cloud computing and other emerging technologies aimed at securing the digital future of the country.

Galaxy Backbone @ 20, Pledges Nationwide Connectivity, Data Sovereignty

Prof Ibrahim Adeyanju, managing director and CEO of GBB, made this known during a press conference to unveil a flurry of activities to celebrate the 20th anniversary of GBB in Abuja on Monday, stressing that Galaxy Backbone has evolved from a connectivity provider into one of Nigeria’s most strategic digital infrastructure institutions.

Galaxy Backbone is a public enterprise of the Federal Government of Nigeria incorporated in 2006 with the primary mandate of setting up and operating a unified Information and Communication Technology (ICT) infrastructure platform that addresses the connectivity, transversal and other technology imperatives for Ministries, Departments and Agencies (MDAs) of the federal government and private entities.

He said in the last 20 years, the agency has invested in world-class data centre infrastructure, including uptime certified Tier III and Tier IV facilities that provide secure, resilient and reliable environments for hosting missions critical to systems and applications.

He noted that these facilities strengthen data sovereignty, ensure business continuity and help keep Nigeria’s most critical digital assets secure.

“Through our cloud infrastructure and the 1Government Cloud platform, government institutions can access scalable digital services without the burden of building costly infrastructure independently. This shared-services model improves efficiency, reduces costs and accelerates innovation.

“We have delivered platforms such as GovMail (the homegrown Official government email), collaboration tools, hosting services, connectivity solutions and shared applications that support thousands of public servants and hundreds of institutions every day,” he said.

He emphasized that the true value of Galaxy Backbone is not measured by kilometres of fibre, data centres or technology alone but by impact.

He explained that the GBB fibre infrastructure today spans almost 30 states of the federation, connecting government institutions and creating the foundation for digital government even as he pledged that the remaining states and local areas will all be captured in due course.

On cyber security, the GBB boss noted that the agency has strengthened cybersecurity capabilities and continues to invest in protecting government systems and critical national digital assets, against cyber-attacks.

“We have the digital infrastructure and we are collaborating with partners to use these emerging technologies. We also have a top tier cyber security operation center and they are multilayered such that even when there is a spike in cyber-attacks none of them have been successful so far.

He added that the GBB is collaborating with other government agencies like the National Security Adviser, The Nigeria Police, and Nigerian Communications Commission (NCC) National Information Technology Development Agency (NITDA) National Identity Management Commission (NIMC) to ensure that government information is protected.

Ibrahim Sani Mohammed, executive director Finance and Corporate Services of the GBB, while fielding questions noted that the agency has created enormous value and has contributed immensely in the digital ecosystem of Nigeria helping to support small and medium enterprises (SMEs).

Olusegun Olulade, executive director Customer Centrality and Marketing of the GBB, said that customers have remained the formidable partners in the GBB journey of 20 years, adding that the agency has developed the mechanism to ensure customer satisfaction as it intensifies efforts to build trust.


Kindly share this post
Continue Reading

Trending