E-Business
Experts Advise African Firms Processing EU Personal Data

A piece of advice has been given to organisations in Africa processing the personal information of data subjects from within the European Union (EU).
At an event hosted by Baker McKenzie and Cognia Law in Johannesburg, Head of the Technology, Media and Telecommunications Practice Group at Baker McKenzie in Johannesburg, Mr Darryl Bernstein, warned organisations doing such to already have effective General Data Protection Regulation (GDPR) compliance procedures in place, including Data Breach Security Checklists, impact assessments and subject data requests procedures.
Mr Bernstein said this due diligence is not only required by the GDPR regulation but can significantly reduce the risks associated with security breaches, raise awareness of the GDPR and ensure that companies have appropriate technical and organisational measures in place to comply with the legislation.
He further said it was essential for organisations to have a General Data Protection Regulation (GDPR) Data Security Breach Checklist in place to assess the risks of a data security breach and to implement a plan to contain and manage any data breaches.
Mr Bernstein noted that the first step on any organisation’s GDPR Data Security Breach Checklist should be to assess the risks associated with a data security breach.
“It is essential to know whose data might have been disclosed, what type of data has been breached and if it contains sensitive information.
“Affected organisations should also asses the volume of data disclosed and if any of the data has been lost or damaged. The cause of the breach and where in the world the breach occurred must also be investigated,” he said.
Mr Bernstein explained that step two on the Checklist should be to contain the breach and recover the data.
“Organisations who have fallen victim to a data breach must establish who will investigate the breach, who will assist with the containment of the breach and/or the recovery of information and if action should also be taken to prevent the breach from recurring. This is also the time to inform the police, if appropriate to do so,” the data expert said.
During step three, organisations must notify all data subjects who have had their private information breached.
“According to the GDPR, notification must take place without undue delay and no later than 72 hours after the breach has occurred. The nature and scope of the breach, as well as its consequences and the measures taken to rectify it, must also be disclosed to affected data subjects,” he said.
Mr Bernstein explained that South African organisations will have to have a similar checklist in place in order to comply to the soon to be implemented Protection of Personal Information Act (POPIA).
POPIA stipulates that a data breach must be notified as soon as reasonably possible after the discovery of the compromise, considering the legitimate needs of law enforcement or any measures reasonably necessary to determine the scope of the compromise and to restore the integrity of the responsible party’s information system.
To assist organisations in the event of a data breach, Baker McKenzie recently launched a mobile application called “Data Breach 72”. This app, which is available in English and French, allows organisations to identify the existence of a data breach, within the scope of application of the GDPR; establish whether it is necessary to notify the competent supervisory body; and prepare an initial draft of this notification. The app forms part of Baker McKenzie’s innovation programme, which aims to rethink the way in which lawyers deal with the challenges their clients are facing.
The final step in Checklist includes a thorough evaluation of the breach. “Once the first three steps are complete, organisations must investigate whether employees were responsible for the breach and if disciplinary action is required. If a third party was involved, the contract should be checked for damages provisions and an impact assessment undertaken. Lastly, organisations must review their procedures and ensure their data is secure going forward,” he said.
Also, partner in Baker McKenzie’s Corporate/M&A practice and TMT specialist, Janet MacKenzie, noted that, “The GDPR further requires organisations to complete a Data Protection Impact Assessment prior to the processing of private information, where the processing is likely to result in a high risk to the rights and freedoms of natural persons.
MacKenzie said it is essential to conduct an Impact Assessment of third parties that process high-risk company personal data, to determine their awareness of GDPR and to ensure that they have appropriate technical and organisational measures in place to comply with the legislation.
For high-risk third parties, audit partners should be identified for the assessment of processes and to determine if on-site audits are required. It is worth noting that the requirements of the GDPR stipulate that data processing can only be outsourced to a third party if the processor guarantees conformity with the requirements of the GDPR.
Janet Taylor Hall, CEO of Cognia Law, explained further, “There were two operational areas where clients tend to underestimate the impact assessment efforts around GDPR – the first being adequately preparing to deal with a data breach when it happens and the second is subject data requests, which can in themselves lead to a breach if not handled appropriately.”
“Right of access is a core principle of the GDPR. Individuals have the right to access their personal data and supplementary information at any time. In responding to these data requests in time (30 days), it is also important that no data is shared that belongs to another individual or that contains intellectual property or trade secrets,” she said.
“Putting a robust subject data request capability in place is an important part of the on-going GDPR compliance support we offer our clients”, highlighted Justin Ridl, Global Head of Legal Services, Cognia Law.
E-Business
Chams Carves Out Subsidiary to Support Africa’s Digital Transformation

Chams Holding Company Plc, (Chams Holdco), digital payments and verification firm, has created a new subsidiary which is expected to strengthen the push for Africa’s digital transformation.

The creation of the new subsidiary, ChamsCorp Plc, which took effect from February 1, was made known in a filing to the Nigerian Exchange Limited , according to an announcement.
Chams said that the new subsidiary, which is its 5th, will give a new dimension to its more than 40 years of work in building the digital ecosystem not only in Nigeria, but across the continent and the rest of the world.
The newly created company will focus on three major aspects, namely the manufacturing of digital devices and development of digital infrastructure and services; data center design, construction and operations, and the development and implementation of AI infrastructure and intelligent systems.
It will also contribute to its parent company’s digital ID, digital verification, and trust services offering.
“For nearly four decades, we’ve enabled trust in transactions and identity. Now, we go furthe”
Chams is expanding into AI, data centre infrastructure, and intelligent systems, building the backbone for Africa’s digital transformation,” the company wrote in a LinkedIn post.
“We are not just participating in the future. We are engineering it,” the message added.
According to the Chams announcement, a decision of its Board of Directors appointed members of the pioneer board of ChamsCorp Plc, with renowned banker Mohammed Bashir Yunusa designated as Chairman.
He is described as a well-known finance expert who specializes in deal structuring, corporate and retail finance, business strategy, digital transformation, and Islamic Finance and Banking.
With more than 10 years of experience in the financial services industry, Yunusa currently serves as head of Consumer and Digital Banking for Non-Interest Banking Retail at Sterling Bank Nigeria, and will also serve as a non-executive director on the board.
“Chamscorp is designed to take our most ambitious ideas to market at speed and scale. As Africa’s digital economy evolves, we are focused on delivering transformative solutions that empower governments, businesses, and citizens alike,” Femi Oyenuga, CEO, Chams, commented on the development.
Chams has over the years played a major role in contributing to Nigeria’s digital ID ecosystem development to facilitate access to financial services.
In 2023, the company Group Chairman publicly stated that in providing such digital services to the Nigerian government, it had incurred debts estimated at $100 million and were planning to change their business model as a result.
E-Business
Nigeria, South Africa Drive Stablecoin Spending in Africa

Africa has emerged as the global frontrunner in stablecoin adoption, with Nigeria and South Africa leading the charge with the fastest adoption rate, as transactions surge across the continent.

This is according to the Stablecoin Utility Report, compiled by YouGov on behalf of fintech firm BVNK.
The study, conducted in partnership with Coinbase and Artemis, surveyed over 4 600 early adopters and crypto-natives in 15 countries across five continents.
It shows people are turning to stablecoins to move money more quickly, securely and affordably – and how this shift in behaviour is becoming a worldwide trend beyond its roots in the Global South.
Stablecoin adoption is accelerating particularly rapidly across Africa in 2026, driven by currency volatility, high inflation and the need for cheaper, faster cross-border payments, it finds.
The Stablecoin Utility Report shows that 79% of African respondents hold stablecoins − the highest ownership rate globally − while 76% say they intend to acquire them in the near future.
Nigeria and SA lead the continent in everyday stablecoin spending, highlighting a shift from holding digital dollars as a store of value, to actively using them for commerce.
The appetite to be paid in stablecoins is even stronger: 95% expressed interest in receiving income via dollar-pegged digital assets, whether for salaries, freelance work or cross-border services, according to the study.
Anthony Yim, co-founder and CEO of crypto research firm Artemis, explains: “We’re experiencing a significant behavioural shift in the way people are using stablecoins.
“Crypto natives and early adopters are fully on board with stablecoins, using them to pay and be paid. This is driving mainstream, global adoption – stablecoin supply has increased 500% over the past five years. Alongside the passage of multiple legislation initiatives in numerous countries, it’s clear we’re experiencing a tipping point.”
From hedge to household spending
Unlike in some developed markets where stablecoins are viewed primarily as a payments upgrade, African users are deploying them as practical financial tools. Key use cases include hedging against inflation, facilitating remittances and funding day-to-day purchases.
The report finds that 92% of African respondents say the condition of their national economy directly affects their stablecoin usage − a reflection of currency volatility, capital controls and high remittance costs across several markets.
Africa also recorded the highest likelihood globally (89%) of users adopting stablecoin-linked debit cards, signalling demand for tighter integration between digital assets and traditional payments.
Infrastructure, not ideology
Taken together, the findings reinforce a broader thesis: stablecoins are evolving beyond a payment method into payments infrastructure, states the report.
For individuals, this means receiving income faster and at lower cost. For businesses, it enables borderless treasury operations and supplier payments. For financial platforms, it opens opportunities to embed stablecoin wallets, debit cards and cross-border settlement into core offerings.
This demand for institutional-grade integration is evident globally, with 77% of survey respondents saying they would open a stablecoin wallet if offered by their primary bank or fintech provider.
As adoption deepens in Africa and regulatory frameworks mature in developed markets, the data suggests stablecoins are no longer a niche crypto product − but a structural layer in the future of global money movement, notes BVNK.
E-Business
Kaspersky Reports 15% Growth in Malicious email Attacks in 2025

According to Kaspersky telemetry, almost every second email – 44.99% of global traffic – was spam in 2025. Spam consists not only of unsolicited emails, but can also include various email threats such as scam, phishing and malware.

In 2025, individuals and corporate users encountered over 144 million malicious and potentially unwanted email attachments, representing a 15% increase compared to the previous year figures.
In 2025, APAC had the largest share of email antivirus detections: it reached 30%, followed by Europe with 21%. Next came Latin America (16%) and the Middle East (15%), Russia and CIS (12%) and Africa (6%). As for individual countries, China had the highest rate of malicious and potentially unwanted email attachments, with the share of email antivirus detections of 14%. Russia ranked second (11%), followed by Mexico (8%), Spain (8%) and Turkey (5%).
Email antivirus detections peaked moderately in June, July and November.
Key trends in email spam and phishing
Kaspersky’s annual analysis has also identified several persistent trends in the email spam and phishing threat landscape that are expected to continue into 2026:
- Combination of various communication channels. Attackers lure email users into switching to messengers or calling fraudulent phone numbers. For instance, scam investment mailings may redirect victims to fake websites, where they are asked to provide their contact information, and then cybercriminals will follow up with a phone call.
- Usage of diverse evasion techniques in phishing and malicious emails. Threat actors frequently try to disguise phishing URLs, for example, with the help of link protection services and QR codes. These QR codes are often embedded directly in email bodies or within PDF attachments, which not only conceals phishing links but also encourages users to scan them on mobile devices, potentially exploiting weaker security measures than corporate PCs.
- Mailings exploiting diverse legitimate platforms. For example, Kaspersky experts discovered a fraudulent tactic that abuses OpenAI’s organisation creation and team invitation features to send spam emails from legitimate OpenAI addresses, potentially tricking users into clicking scam links or dialing fraudulent phone numbers. Additionally, a calendar-based phishing scheme, which originated in the late 2010s, resurfaced last year with a focus on corporate users.
- Refining tactics in business email compromise (BEC) attacks. In 2025 attackers attempted to become even more persuasive by incorporating fake forwarded emails into their correspondence. These emails lacked thread-index headers or other headers, making it difficult to verify their legitimacy within an email conversation.
“Email phishing shouldn’t be underestimated. Our report reveals that one in ten business attacks starts with phishing, with a significant proportion being Advanced Persistent Threats (APTs). In 2025, we saw an increase in the sophistication of targeted email attacks. Even the smallest details are meticulously crafted in these malicious campaigns, including the composition of sender addresses and the tailoring of content to real corporate events and processes.
“The commodification of generative AI has significantly amplified this threat, enabling attackers to craft convincing, personalised phishing messages at scale with minimal effort, automatically adapting tone, language and context to specific targets,” comments Roman Dedenok, anti-spam expert at Kaspersky.
News2 days agoAfrican Leaders Highlight Africa’s AI Ambitions
General News2 days agoNDPC Orders Probe into Temu over Alleged Data Privacy Breaches
Telecom2 days agoMTN, BUA, Dangote & Other Industry Giants Triumph at NGX Made of Africa Awards
Telecom2 days agoX Suffers Global Outage, Millions Barred from Access
News2 days agoLG Nigeria Begins Nationwide Search for Oldest Working TV, Rewards Loyalty with AI QNED Upgrade
Telecom2 days agoMTN CIO Urges Africa to Lead Fourth Digital Revolution
Telecom1 day agoTerra Moves to Expand in African Drone Sector, Secures $22m Funding
Telecom2 days agoNigeria’s Internet Users Hit 148.2m Amid Data Cost Surge












