E-Business
NITDA Clarifies Regulatory Infractions Allegation By ALTON

The National Information Technology Development Agency (NITDA) has cleared the air on the allegations made by Association of Licensed Telecommunication Operators of Nigeria (ALTON) that it engages on regulatory infractions.
Emmanuel Edet Esq, head, Legal Services & Board Matters, National Information Technology Development Agency, made the clarifications in a statement released on Wednesday in Abuja.
According to the statement, “The attention of the National Information Technology Development Agency (NITDA) has been drawn to a publication ascribed to the President of the Association of Licensed Telecommunication Operators of Nigeria (ALTON) published in the media regarding certain regulations and guidelines issued by the Agency.
For avoidance of doubt, NITDA has enjoyed a cordial and cooperative relationship with all sector regulators and we have consistently engaged them on all regulations and guidelines issued by the Agency. In this vein, NITDA has significantly socialized the Nigeria Data Protection Regulation (NDPR) 2019 and the Public Internet Access Regulation 2019 as referenced in the publication. The Agency is delighted with the support of several institutions in complying and promoting these regulations.
For clarity, no single regulator in Nigeria has a converged mandate on ICT in the country. Various Agencies have different roles to play in developing and regulating ICT in Nigeria as dictated by their mandates and enabling laws. Furthermore, no single entity is regulated by only one regulator in Nigeria, regulators in the country work in a cooperative and complementary capacity, resolving mandate overlaps in a cooperative manner. ALTON, as with various industry groups, are expected to comply with various professional, sector, geographical and international regulators when their operations so demand. This understanding has been shared between NITDA and other regulators in Nigeria.
It may be recalled that NITDA issued five regulatory instruments on the 25th January, 2019, two of which were referenced in the publication. We wish to draw the attention of the public to the following:
- The Framework and Guidelines for Public Internet Access(PIA) 2019 was issued to ensure the safe use of free or subsidized publicly accessible internet service in Nigeria. NITDA has been inundated by concerned stakeholders to check the regime of publicly accessible internet service considering its national security dimensions.
The Framework and Guidelines aims to create and promote a mutually beneficial and friendly environment for both public internet access providers and users in Nigeria. The Regulation is directed at Public Internet Access Providers (PIAPs). PIAPs include any business or other entity that provide internet access without charge or offers a partially subsidized internet access to members of the public. The concerns which NITDA aims to address through this regulatory instrument are:
- Cyber security and cyber crime;
- Personal data breaches; and
- Crime detection, prevention and investigation.
NITDA is enabled to address these concerns by virtue of Section 6(c) and (m) of the NITDA Act which mandates the Agency to provide Guidelines for electronic data interchange in Nigeria and to accelerate internet and intranet penetration in Nigeria and promote sound internet Governance.
- The Directives for Registration of Data Centre Facilities in Nigeria was issued pursuant to Section 6 of the NITDA Act 2007 which empowers the Agency to:
- Create a framework for the planning, research, development, standardization, application, coordination, monitoring, evaluation and regulation of Information Technology practices, activities and systems in Nigeria and all matters related thereto…;and
- Create incentives to promote the use of information technology in all spheres of life in Nigeria including the development of guidelines for setting up of information technology systems and knowledge parks.
Data Centre operations are principally information technology systems which support the entire IT value-chain. Reference to Executive Orders 003(2017) and 005(2018) mainly cites the added Presidential Directives on local content promotion. The fundamental mandate arises from the NITDA Act which has been cited above. Furthermore, the Guidelines for Nigerian Content Development in ICT (2019)explicitly provides:
Data and Information Management Companies shall:
- Register their products, capabilities and organization on the NITDA portal. The service will be provided free of charge and devoid of bureaucracy and will ensure NITDA awareness of available resources.
- Host government data locally within the country and shall not for any reason host any government data outside the country without an express approval from NITDA and the SGF.
The Nigerian Content Guidelines is a salutary example of regulatory cooperation between NITDA and ICT stakeholders to promote Local Content in Nigeria. The above provisionsanticipate the role of NITDA in the regulation and promotion of Data Centers in Nigeria. The Agency is not averse to any Regulator demanding compliance as it relates to the operation of Data Centers that touches on the Regulator’s mandate. Interestingly, Data Center operators have openly commended NITDAfor the improved enforcement of regulations and policies which has led to significant increase in Data Centre patronage in the last three years.
- The report further purports to take issues with the classification of Internet Protocol address, IMEI number, IMSI number etc. as personal data under the Regulation. The report assumes this amounted to usurpation of the NCC’s regulatory mandate. This is a patent misreading of regulatory frameworks. In the absence of a National Assembly-enacted legislation on Data Protection, Section 6 (c) of the NITDA Act 2007 specifically empowers the Agencyto:
“Develop guidelines for electronic governance and monitor the use of electronic data interchange and other forms of electronic communication transactions as an alternative to paper-based methods in government, commerce, education, the private and public sectors, labour, and other fields, where the use of electronic communication may improve the exchange of data and information.”
Furthermore, NITDA was established to implement the National IT Policy of 2000. Article 5(xix) of the Policy provides…Government will establish a National Information Technology Development Agency to implement the IT Policy, regulate, monitor, evaluate and verify progress on an ongoing basis…
Also, Strategy 13.3(iii) of the Policy further provides …Ensure the protection of individual and collective privacy, security, and confidentiality of information…
While it is global practice for sector regulators to give sector specific directives and regulations on how certain issues are to be addressed, this does not restrict the right of Government Agencies to issue regulations which cover the field as is the case in this matter. NITDA is in active collaboration with all sector regulators to ensure full compliance with the NDPR. The aggregate consensus of most stakeholders is that the NDPR is a laudable regulation which would further improve the Nigerian business environment and help attract foreign direct investment.
Finally, we advise that it is not in the strategic interest of interest groups to attempt to set Government Agencies against each other just because of its short-term benefits. NITDA is clear about its mandate as provided bythe enabling law and will not be overawed by powerful interest groups to implement its mandate which is to the overall benefit of all Nigerians.It should also be noted that violation of the Regulatory Instruments of NITDA is a criminal offence and punishable with fine, imprisonment or both.”
E-Business
Kaspersky Report Shows Early 2026 Witnessed an Increase in Cyberattacks on the Manufacturing Sector

According to a new Kaspersky ICS CERT report, in Q1 2026 the percentage of industrial control systems (ICS) on which malicious objects were blocked reached 19.6% globally. Kaspersky security solutions blocked malware from 10,052 different malware families of various categories on industrial automation systems.

Regionally, the share of ICS computers that were attacked ranged from 27.4% in Africa to 9.1% in Northern Europe. Compared to the previous quarter, attacks on the manufacturing sector in Q1 increased in multiple regions, including in Europe and Asia.
Regional split
In terms of overall numbers across all industry sectors, five regions saw an increase in the share of attacked ICS computers in Q1 2026 compared to the previous quarter. These were Southern Europe, Russia, Northern Europe, Canada and Africa.
Industries
In Q1, biometric systems traditionally placed first in terms of the share of ICS computers on which malicious objects were blocked, at 26.4%. These systems commonly have Internet access, are used for email, and, in many cases, have minimal cybersecurity controls within the organisations that use these systems.
Regionally, Southern Europe leads the ranking based on the percentage figures for biometric systems, at 35.15%. Africa follows at 29.58%, and Central Asia comes in third at 28.53%.
In the manufacturing industry, Southeast Asia ranks first among regions in terms of the percentage of ICS computers attacked (23.21%), followed by Africa (21.36%) and South Asia (20.13%).
In 2025, Kaspersky and VDC Research estimated that in just the first three quarters of 2025 cyberattacks on manufacturing organisations via ransomware could have generated over $18 billion globally in losses. Actual business losses could have been even higher when factoring in supply-chain disruptions, reputational damage, and recovery expenses.
“Legacy operational technology systems remain deeply embedded in manufacturing environments, which makes them vulnerable. Supply chain complexity and branching of the trusted partner network expands the attack surface beyond the network perimeter.
Attackers are realising that targeting OT assets of an industrial enterprise is not rocket science, which is why factory shutdowns bring massive financial losses,” commented Evgeny Goncharov, Head of Kaspersky ICS CERT.
E-Business
NDPC, Meta Launch 2-Year M-SIDP after Regulatory Settlement

Nigeria Data Protection Commission (NDPC) has launched the Meta-Supported Initiatives for Data Protection (M-SIDP), a strategic programme aimed at strengthening data privacy awareness, regulatory compliance and institutional capacity across Nigeria’s digital ecosystem.

The initiative follows the conclusion of regulatory proceedings involving Meta Platforms Inc., the parent company of Facebook, Instagram and WhatsApp, over concerns relating to the processing of personal data belonging to Nigerian users. The matter was resolved in 2025 through a court-approved settlement.
Under the agreement, Meta committed to supporting a two-year programme of public-facing data protection measures designed to advance the objectives of the Nigeria Data Protection Act (NDP Act) 2023, the General Application and Implementation Directive (GAID), and the NDPC Strategic Roadmap and Action Plan (SRAP) 2023–2027.
Announcing the initiative, the Commission said the programme would strengthen safeguards for data subjects while promoting responsible data processing practices among organisations operating in Nigeria.
According to a statement signed by Itunu Dosekun, head of the NDPC Media Unit, the programme will focus on governance, research and development, safety and sustainability mechanisms for technology ecosystems, capacity building for Data Protection Officers (DPOs) and Data Protection Compliance Organisations (DPCOs), as well as public awareness campaigns targeted at vulnerable groups.
The Commission stated, “As part of the settlement, Meta committed to supporting a two-year programme of public-facing data protection measures that aligns with the objectives of the Nigeria Data Protection Act, 2023 (NDP Act), the NDP Act General Application and Implementation Directive (GAID) and the NDPC Strategic Roadmap and Action Plan (SRAP) 2023–2027.”
The NDPC stressed that the settlement does not limit its regulatory authority.
“Nothing in this settlement limits the Commission’s independent statutory powers as we continue to exercise our regulatory mandate in relation to data processing activities in Nigeria, in accordance with the NDP Act and other applicable laws,” it stated.
The development comes amid rising global scrutiny of technology companies over data privacy practices, with regulators in regions including the European Union and the United States tightening enforcement against breaches and non-compliance.
Nigeria has also intensified efforts to strengthen its privacy framework following the enactment of the Nigeria Data Protection Act in 2023, which established the NDPC as an independent regulator empowered to monitor compliance, investigate violations and impose sanctions.
Industry experts warn that increasing digital adoption across banking, telecommunications, e-commerce, healthcare and public services has heightened risks of identity theft, cybercrime and unauthorised data sharing.
The NDPC has in recent years stepped up enforcement actions against organisations that violate data protection rules, while also expanding accreditation for Data Protection Compliance Organisations and training for privacy professionals.
The Meta-supported initiative is expected to address gaps in public awareness and technical capacity, while also supporting research and policy development on emerging issues such as artificial intelligence, cross-border data transfers and platform governance.
The Commission said it would provide periodic updates on the implementation of the programme and called on stakeholders to support efforts to build a secure, transparent and accountable privacy ecosystem in Nigeria.
E-Business
Monnify Processed ₦25 Trillion Worth of Transactions in 2025, Stepping into the Spotlight

When you make a payment online in Nigeria and it goes through smoothly, no failed transaction, no delayed confirmation, no debit without value, there is a good chance Monnify is involved.

Most users don’t pay attention to what goes on in the backend but for businesses, especially those processing payments at scale, that layer matters. It is what ensures collections are successful, transactions are properly reconciled, and money moves when it should.
In 2025, Monnify processed ₦25 trillion in transactions, about $18 billion, representing a 38 percent increase from 2023. This growth came during a period when Nigerian businesses were dealing with currency volatility, rising costs, and increasing pressure on infrastructure to perform consistently.
Monnify did not just handle that demand, it grew within it. It became more relied on when reliability mattered most.
Monnify sits within TeamApt, the technology infrastructure arm of Moniepoint Inc. While Moniepoint MFB is the consumer and business banking face that millions of Nigerians interact with daily, TeamApt is the engine underneath, and Monnify is its payment gateway service built for businesses that need to collect and disburse money at scale.
Its customer base reflects the breadth of Nigeria’s digital economy. On the fintech side, companies like PiggyVest, Cowrywise, Bamboo, Rise, and Nomba are part of the platform’s ecosystem. In commerce and distribution, players such as OmniRetail and Olam also integrate with it, alongside transport companies like GIGM, mobility platforms like MAX, and organisations across education, cooperatives, utilities, and government.
Today, more than 100,000 merchants use Monnify, supported by integrations across 27 Nigerian banks.
Part of what differentiates the platform is its licensing structure. TeamApt holds a switching licence from the Central Bank of Nigeria, while Monnify operates with a Payment Solution Service Provider licence. This allows it to connect directly to key parts of the financial system without relying heavily on intermediaries.
The result is better control over transactions, faster settlements, and stronger success rates.
The early bet that paid off
In 2019, Monnify introduced virtual accounts into Nigeria’s payments ecosystem. At the time, the concept was not widely adopted. Today, it is standard.
Virtual accounts allow businesses to assign unique account numbers to customers or transactions, making it easier to track payments automatically without manual reconciliation. For fintechs handling thousands of inflows daily, or cooperatives collecting dues across multiple locations, this removed a major operational burden.
What now feels like a basic feature required early conviction. Monnify built the infrastructure, demonstrated its value, and adoption followed as more businesses began to prioritise automation and scale.
What drove its ₦25 trillion year
According to Damilare Ogunnaike – VP, Monnify Payment Gateway, “Scale in payments is not only about acquiring customers. It is about retaining them through consistent performance.
For many businesses, reliability is the deciding factor when choosing a payment partner. Transactions need to go through, confirmations need to be immediate, and systems need to hold up during peak periods.
Monnify has focused heavily on this layer. Internal testing has recorded settlement times as fast as three seconds on select bank routes. The platform has also invested in handling higher transaction volumes without a drop in success rates during peak cycles such as month-end collections and high-traffic events. These are the moments where payment systems are most likely to fail, and where businesses are most sensitive to performance.
Pricing has also played a role. For companies processing large volumes of transactions, costs scale quickly. Monnify’s pricing structure has made it a commercially viable option for both growing startups and established platforms, reinforcing its position as a long-term partner.
That combination of consistent performance and cost efficiency is what drives volume at scale, and it is a key reason Monnify was able to process ₦25 trillion in transactions in 2025.
From one-off payments to predictable revenue
In 2025, Monnify expanded into direct debit, moving beyond one-time collections into automated, recurring payments. For businesses such as lenders, utilities, subscription platforms, and educational institutions, this is critical. Predictable collections translate directly into predictable revenue.
The opportunity is still largely untapped. Direct debit currently accounts for just 0.44 percent of Nigeria’s total payment volume and Monnify is positioning itself to change that.
Its recent partnerships point to where this could have the most impact. With Baobab Renewable Energy, it supports collections across distributed clean energy networks operating in multiple states.
With Awabah, a platform focused on pension adoption among informal sector workers, Monnify enables automated contributions for users who have historically operated outside formal savings systems.
These use cases highlight a broader shift from simple transactions to financial infrastructure that supports long-term participation in the economy.
Stepping into the spotlight
For years, Monnify has built its reputation within developer and business circles, powering payments for companies rather than interacting directly with end users. That is beginning to change.
With products like direct debit, the platform is moving closer to the end customer experience. As more businesses adopt automated collections, Monnify’s infrastructure will increasingly shape how individuals pay for services, manage subscriptions, and participate in financial systems without necessarily knowing it.
At the same time, the company is pushing to deepen its reach across industries, with a focus on onboarding more businesses and expanding use cases for its payment rails. The ambition is not just to support transactions, but to become a more embedded layer across how money moves within the economy.
The recent launch of its new website reflects this shift. Clearer positioning, improved documentation, and a more defined product narrative signal a company that is no longer operating only in the background, but is becoming more deliberate about how it is seen and understood.
₦25 trillion in transactions is a milestone built largely behind the scenes. How that scales as Monnify steps into the spotlight is worth looking forward to.
E-Financial3 days agoBOI Wins Dual Honours @ EMEA Finance Awards for Sustainability and Social Impact Leadership
E-Financial3 days agoCBN Imposes N100m Penalty on Dealing Bank Inadequate Processing of Forex Documents
Telecom3 days agoPrice of Data in Nigerian Mobile among Top Four Cheapest Globally – MTN CEO
E-Business3 days agoNITDA Okays NiRA’s Annual, Business Report
Telecom3 days agoNAIFF Returns for 2026, Expands Focus on AI-Powered Storytelling in Africa
Telecom2 days agoFCCPC Refutes Airtime Market Takeover Claims
General News2 days agoSSDC Warns Businesses against Cyber, Election-Related Risks
E-Financial2 days agoReps Committee Recovers N521m Unremitted VAT from CBN



















