NDPC Launches Investigation into Alleged Data Breach Involving Remita, Sterling Bank The Nigeria Data Protection Commission (NDPC) has initiated an investigation into a suspected data breach involving Remita Payment Services Ltd., Sterling Bank, and other entities, reflecting heightened regulatory oversight in Nigeria’s digital payments sector. In a statement released on Sunday by Babatunde Bamigboye, Head of Legal, Enforcement and Regulations, the NDPC confirmed that a Notice of Investigation was served on the affected parties on April 1, 2026, as part of standard procedural protocols. The Commission has since begun collecting information from relevant organizations and individuals to support the inquiry. The investigation aims to assess the scope of the breach, including the categories of personal data exposed, the nature and extent of the incident, potential risks to affected individuals, and any mitigation measures already implemented. The NDPC emphasized its commitment to ensuring data subjects are protected through robust technical and organizational safeguards. The probe comes amid rising concerns over data privacy and security in Nigeria’s rapidly expanding fintech and banking industries, where vast amounts of personal and financial data are processed daily. Vincent Olatunji, National Commissioner and CEO of the NDPC, stated that the review would extend to organizations using digital payment platforms without full compliance with data protection requirements. These entities will be evaluated under the Nigeria Data Protection Act 2023, as part of broader efforts to enforce compliance and strengthen the country’s data protection framework.