Nigeria Data Protection Commission (NDPC) has began a comprehensive investigation of companies in the various sectors of the economy in order to expose data breaches and mete out appropriate sanctions.

The NDPC said companies in the insurance, banking, hospitality, pension, gaming and insurance brokers amongst others would be probed to determine their compliance with the NDP Act 2023..

The compliance notice, the commission said, forms part of a sector-by-sector investigation to enforce adherence to the law, which came into effect last year to safeguard citizens’ rights and strengthen Nigeria’s participation in the global digital economy.

“The Nigeria Data Protection Commission, in furtherance of its mandate under the Nigeria Data Protection Act, 2023, has commenced a sector-by-sector investigation of organisations suspected of non-compliance with the provisions of the Act,” the commission said in a statement on Sunday.

The statement, signed by Babatunde Bamigboye, head of Legal, Enforcement and Regulations at the NDPC, explained that the notice was issued pursuant to sections 5(i), 6(a), 6(c), 46(3), and 47(1)-(2) of the Act.

According to the statement, the list of affected organisations would be published in national newspapers on Monday, August 25, 2025.

“These organisations are required to, within 21 days of issuance, provide the following: evidence of filing NDP Act Compliance Audit Returns for 2024, evidence of designation or appointment of a Data Protection Officer, summary of technical and organisational measures for data protection within the organisation, and evidence of registration as a Data Controller or Processor of Major Importance,” the statement continued.

The commission warned that any organisation that failed to comply with the notice risked facing serious regulatory sanctions.

“Failure to comply with this Compliance Notice may result in enforcement actions, including the issuance of an Enforcement Order, administrative fines, and/or criminal prosecution in accordance with the NDP Act, 2023,” the statement added.

The NDPC stressed that its actions were designed not only to enforce compliance but also to protect Nigerians’ data rights.

It said the NDP Act was enacted to “safeguard the fundamental rights, freedoms, and interests of data subjects as guaranteed under the Constitution of the Federal Republic of Nigeria, 1999,” while also providing a legal framework to ensure Nigeria’s “trusted and beneficial participation in regional and global economies through responsible use of personal data.”

The Commission further reaffirmed its resolve to entrench accountability in the country’s data protection ecosystem.

“The NDPC remains committed to ensuring a culture of accountability and trust in Nigeria’s data protection and privacy ecosystem, while safeguarding the rights of data subjects and strengthening the nation’s digital economy,” the statement added.

The commission has so far demonstrated its readiness to enforce the law by slamming heavy penalties on erring organisations.

Multichoice Nigeria was fined N766.2m for what the commission described as patently intrusive, unfair, unnecessary and disproportionate data practices, including illegal cross-border transfers of subscriber information.

Cybersecurity teams today face increasingly sophisticated attacks powered by artificial intelligence (AI), automation, and advanced persistent threats (APTs), making traditional reactive security measures insufficient.

To effectively counter these evolving dangers, organisations must adopt a proactive approach that leverages threat intelligence (TI). By anticipating potential threats, detecting malicious activities early, and mitigating risks before they escalate, businesses can strengthen their defenses and maintain resilience in a rapidly changing environment. This shift from reactive to proactive security strategies is essential for staying ahead of cybercriminals and safeguarding critical assets.

In its recent study, Kaspersky surveyed IT professionals across industries and regions to understand how businesses use threat intelligence to bolster their defenses. The findings reveal that while an overwhelming majority (81%) of organisations in the Middle East, Turkiye, and Africa (META) region and 80% in South Africa, are satisfied with their available threat intelligence, there is still significant room for improvement – particularly in integration, speed, and relevance.

The critical role of threat intelligence

Threat intelligence goes beyond data collection, it provides actionable insights into adversary tactics, techniques and procedures (TTPs). By studying attacker behaviour, security teams can detect threats earlier, refine defensive strategies and respond more effectively both during and after incidents.

The study highlights that 37% of companies in the META region and 35% in South Africa rely on specialised TI vendors for curated intelligence, while close to a third (31% and 28% respectively) engage in threat data exchanges with other organisations. Another 30% in the META region and 35% in South Africa gather intelligence from open sources, demonstrating the widespread recognition of TI’s value.

The importance of TI in cybersecurity cannot be overstated, as it helps organisations stay ahead of evolving threats and adapt their defenses accordingly. It enables proactive risk management and enhances the ability to anticipate potential attacks before they occur.

The most effective threat intelligence must be timely, reflecting the latest threats, a priority for 40% of respondents in the META region. It must also be actionable, seamlessly integrating into security workflows, which is a key concern for 40% of professionals in the META region.

Additionally, 36% of respondents emphasised the need for better analysis, including prioritisation and de-duplication, to make intelligence truly usable in real-world scenarios.

Key areas for improvement

While most organisations already benefit from TI, experts have identified several areas where enhancements could make a substantial difference. The single most pressing need, cited by 24% of respondents in the META region, is easier integration into existing processes, which would allow threat intelligence to be more seamlessly incorporated into daily security operations. 12% highlighted the importance of better analysis to improve accessibility, meaning that intelligence should be easier to interpret and act upon for security teams.

Meanwhile, 8% called for more robust comparative threat analysis across different systems, enabling organisations to better understand the context and relationships between various threats. Speed is another critical factor, with 12% emphasising the need for faster intelligence delivery to ensure timely responses to emerging threats.

Beyond these integration and usability concerns, professionals also prioritise quality and accuracy. 32% surveyed in the META region stress the importance of high-quality intelligence, which is precise, relevant, and reliable, to avoid false positives and missed threats.

Additionally, 32% seek more comprehensive coverage to ensure no critical threats slip through the cracks, emphasising the need for a broader scope of intelligence sources and insights to maintain a strong security posture.

Navigating today’s threat landscape demands reliable, expert-curated intelligence. While many organisations recognise its value and are satisfied with their current capabilities, they are searching for significant opportunities for improvement – particularly in areas such as integration, speed, and relevance.

By investing in these key areas, organisations can enhance their ability to respond swiftly and accurately to emerging threats, ultimately reducing risk and strengthening their security posture. Partnering with trusted providers like Kaspersky, which offers expert-curated insights and real-time intelligence, empowers businesses to navigate today’s challenging threat landscape with confidence.

To enable your InfoSec professionals to gain in-depth visibility into cyber threats targeting your organisation, use Kaspersky Threat Intelligence, which provides rich and meaningful context across the entire incident management cycle and helps identify cyber risks in a timely manner.

Nigerians living abroad are now able to access National Identification Number (NIN) services in a seamless, robust, more secure, and efficient manner.

This follows the recent upgrade of the platform that enables the delivery of the NIN service, the National Identity Management Commission (NIMC) said in an announcement.

“To ensure effective service delivery and smooth management of the National Identification Number (NIN) enrolment in the Diaspora, the National Identity Management Commission has successfully upgraded its diaspora enrolment platform,” a part of the announcement reads.

At the time of the announcement, the NIMC said it had onboarded all Diaspora Front-End Partners (FEPs) to the upgraded platform, and had organized “intensive training to equip the FEPs with the prerequisite knowledge on the application and effective management of the new system.”

As soon as the renewed system went live, the NIMC stated that all diaspora FEPs had up to 48 hours to obtain and activate their NIN enrollment licences, and that only compliant partners would be able to provide NIN services to users.

The NIMC regretted “any inconvenience the platform upgrade process might have caused” and mentioned the setting up of “a dedicated service team to resolve all issues related to diaspora enrollment.”

In July, Nigerians at home complained of difficulties in accessing NIN services digitally, especially the NIN authentication platform, but the ID authority said the system had been stabilized.

The ID agency also urged citizens both at home and abroad, who have not yet downloaded the NINAuth platform, to do so, in order to easily access digital ID authentication services without having to move a muscle.

The NIMC also recently onboarded telcos so they can offer NIN verification for SM card services.

As of May, the NIMC said 120 million NINs had been issued, and the body plans to reach about 95 percent of Nigerians with the digital ID by December, according to Channels TV.