E-Business
NDPC Begins Probe of Banks, Others for Data Breaches

Nigeria Data Protection Commission (NDPC) has began a comprehensive investigation of companies in the various sectors of the economy in order to expose data breaches and mete out appropriate sanctions.

The NDPC said companies in the insurance, banking, hospitality, pension, gaming and insurance brokers amongst others would be probed to determine their compliance with the NDP Act 2023..
The compliance notice, the commission said, forms part of a sector-by-sector investigation to enforce adherence to the law, which came into effect last year to safeguard citizens’ rights and strengthen Nigeria’s participation in the global digital economy.
“The Nigeria Data Protection Commission, in furtherance of its mandate under the Nigeria Data Protection Act, 2023, has commenced a sector-by-sector investigation of organisations suspected of non-compliance with the provisions of the Act,” the commission said in a statement on Sunday.
The statement, signed by Babatunde Bamigboye, head of Legal, Enforcement and Regulations at the NDPC, explained that the notice was issued pursuant to sections 5(i), 6(a), 6(c), 46(3), and 47(1)-(2) of the Act.
According to the statement, the list of affected organisations would be published in national newspapers on Monday, August 25, 2025.
“These organisations are required to, within 21 days of issuance, provide the following: evidence of filing NDP Act Compliance Audit Returns for 2024, evidence of designation or appointment of a Data Protection Officer, summary of technical and organisational measures for data protection within the organisation, and evidence of registration as a Data Controller or Processor of Major Importance,” the statement continued.
The commission warned that any organisation that failed to comply with the notice risked facing serious regulatory sanctions.
“Failure to comply with this Compliance Notice may result in enforcement actions, including the issuance of an Enforcement Order, administrative fines, and/or criminal prosecution in accordance with the NDP Act, 2023,” the statement added.
The NDPC stressed that its actions were designed not only to enforce compliance but also to protect Nigerians’ data rights.
It said the NDP Act was enacted to “safeguard the fundamental rights, freedoms, and interests of data subjects as guaranteed under the Constitution of the Federal Republic of Nigeria, 1999,” while also providing a legal framework to ensure Nigeria’s “trusted and beneficial participation in regional and global economies through responsible use of personal data.”
The Commission further reaffirmed its resolve to entrench accountability in the country’s data protection ecosystem.
“The NDPC remains committed to ensuring a culture of accountability and trust in Nigeria’s data protection and privacy ecosystem, while safeguarding the rights of data subjects and strengthening the nation’s digital economy,” the statement added.
The commission has so far demonstrated its readiness to enforce the law by slamming heavy penalties on erring organisations.
Multichoice Nigeria was fined N766.2m for what the commission described as patently intrusive, unfair, unnecessary and disproportionate data practices, including illegal cross-border transfers of subscriber information.
E-Business
Firm Spots Rising Scam Activity Around the 2026 World Cup, from Bogus Tickets to $500,000 “grant” Emails

Millions of football fans around the world are gearing up for the World Cup, and cybercriminals are seizing the moment to exploit the heightened interest.

Experts at Kaspersky have uncovered various types of scams that mimic official tournament resources or leverage the event for unsafe purposes, putting users’ data and finances at significant risk.
On one of the fraudulent websites discovered, users are offered the option to buy tickets for FIFA World Cup matches, with payments accepted in almost any currency.
However, after completing the fake registration and payment steps, users risk not only losing money from their bank cards but also exposing sensitive personal data to attackers.
The site uses the official colour scheme of the 2026 tournament to mislead users. In addition, the scammers offer ways to contact them, either directly on the site or via messaging apps.
Another website offers users the chance to purchase “official merchandise” for the 2026 tournament, featuring images of mascot plush toys and T-shirts, with a wide selection available for “purchase.” To make the offer more enticing, the site highlights steep discounts. Additionally, to appear more credible, the scammers have added a “Trusted store” badge at the bottom of the page, along with a registration form that requests personal and banking details.
Another attack scenario involves fraudulent email campaigns, in which attackers attempt to trick users into sending money or click a phishing link. To increase the chances of engagement, the emails feature compelling subject lines and persuasive messaging.
In one of the examples identified, fans received emails allegedly sent by official representatives of the event regarding a fake decision from a dispute resolution chamber. The link provided in the email leads to a phishing page.
In some cases, users are targeted with scam emails claiming they have “won” a $500,000 grant to cover tickets, flights, and accommodation, followed by instructions to contact the sender to claim the “prize” funds. Kaspersky also reports email spam and unsolicited ads related to the sale of competition-themed merchandise and souvenirs, some of them might turn out to be a scam.
“Unfortunately, major sporting events that attract large audiences are never overlooked by scammers. Seemingly harmless or even appealing emails can often conceal not only dangerous links and malicious attachments.
In some cases, careless interaction with such messages can lead to serious device infections. We recommend that users ignore any suspicious emails and websites to protect their financial assets and keep their devices and personal data secure,” says Anna Lazaricheva, senior spam analyst at Kaspersky.
E-Business
NDPC Warns of Offshore Data Risks as 90 Percent of Country’s Data is Hosted Abroad

Nigeria Data Protection Commission (NDPC) has raised concerns over data sovereignty, national security as well as loss of economic value, as over 90 per cent of Nigeria’s data is hosted abroad.

Pic credit…247digitize.com
Vincent Olatunji, national commissioner/CEO, NDPC, stressed the importance of safeguarding Nigeria’s digital economy through strong data protection and privacy frameworks.
He spoke while while delivering a keynote address at the IoT West Africa Conference, where he stated that the trend poses significant risks to Nigeria’s control over its digital assets.
He further described the situation as precarious for the nation’s sovereignty, and called for urgent investment in local data infrastructure.
Olatunji, highlighted data sovereignty, the growing role of data centres, and regulatory expectations under the Nigeria Data Protection Act, 2023, noting both the benefits of compliance and the risks of non-compliance. Olatunji underscored that data centres are now critical infrastructure for Nigeria’s digital transformation.
While decrying that over 90 percent of the Nigeria’s data is hosted abroad which is precarious for the nation’s sovereignty he encouraged for more investment in the sector as it is projected to reach $1.9 billion by 2031.
Also speaking, Kashifu Inuwa, the director-general of the National Information Technology Development Agency (NITDA), said policy is emerging as the key driver of Nigeria’s digital transformation, particularly in shaping the development of the Lagos-Abuja digital corridor.
“While infrastructure responds to demand, policy creates the enabling environment for sustainable growth,”
Inuwa who was represented by Aristotle Onumo, director, stakeholders management and partnership at the IoT West Africa Conference in Lagos, on the theme “The Lagos-Abuja Digital Corridor: Building Africa’s Next Data Centre and Cloud Hub.”
Inuwa emphasised that while infrastructure responds to demand, policy remains the critical driver that creates an enabling environment for sustainable digital growth.
He explained that Nigeria’s broadband policy, which stipulates minimum speeds of 10 Mbps for rural areas and 25 Mbps for urban centres, provides a strategic framework for prioritising infrastructure deployment along the Lagos-Abuja digital corridor.
He cautioned, however, that without deliberate collaboration and partnership between government, the private sector, and civil society, widespread infrastructure rollout would remain challenging. “Collaboration is the pathway that massifies impact, while partnership harnesses collective intelligence. No one can achieve this in isolation,” he said.
Inuwa also spoke on the Nigerian Sovereign Cloud Project; a flagship initiative aimed at strengthening indigenous cloud service providers and preventing the dominance of Nigeria’s digital infrastructure by foreign hyperscale operators.
By scaling local infrastructure to meet global standards, the project seeks to domesticate data hosting, reduce operational costs, and improve access to cloud services across the country.
E-Business
Opay Plans IPO in US, Targets $4Bn in Valuation

Opay, a financial technology (fintech) firm, is working with Citigroup Inc., Deutsche Bank AG, and JPMorgan Chase & Co. for an initial public offering (IPO).

According to a report by Bloomberg on Friday, sources said the platform, backed by SoftBank Group Corp., is considering a listing in the United States and is targeting a valuation of about $4 billion.
They added that the company could proceed with the share sale later this year, although the timing and size of the offering are yet to be finalised.
Opay is one of Africa’s fastest-growing fintech firms, offering mobile payments, transfers, and other financial services across Nigeria.
Advertisement
The fintech company, Citi, Deutsche Bank, and JPMorgan have not publicly commented on the IPO plans.
Like Opay, Flutterwave, a major fintech company in Africa is planning an IPO.
News1 day agoStakeholders Applaud NiRA’s Leadership in Strengthening Nigeria’s Internet Infrastructure
E-Business1 day agoNDPC Warns of Offshore Data Risks as 90 Percent of Country’s Data is Hosted Abroad
Broadcasting1 day agoDavid Ogbueli and Unseen Architecture of Global Transformation
General News1 day agoUBA Debunks Viral Divorce Claim against Elumelus, Suspects in Custody
General News1 day agoNITDA Partners Galaxy Backbone to Deliver Subsidised Cloud Services to Startups
E-Financial1 day agoTax Ombudsman Sets 30-Day Limit for Settlement of Tax Disputes
E-Financial1 day agoAccess Bank Warns Nigerians against Fake WhatsApp Investment Groups using Aig-Imoukhuede’s Identity
Telecom1 day agoNigeria to Deploy 50,000 AI-Powered Smart Lampposts in Bold Tech Move


















