Remita is currently facing regulatory heat as NDPC launches investigation over alleged data breach.
NewsOnline Nigeria reports that Remita Payment Services Limited has come under regulatory scrutiny after the Nigeria Data Protection Commission (NDPC) opened an investigation into an alleged data breach involving the payment platform and other entities within Nigeria’s digital payments ecosystem.
The development has raised fresh concerns about data security practices in Nigeria’s rapidly expanding fintech and electronic payment sector, particularly as Remita plays a central role in government and corporate payment processing across the country.
In a statement, the NDPC’s Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, confirmed that a Notice of Investigation was served on April 1, 2026, with relevant organisations now required to provide information relating to the suspected breach.
According to the commission, the probe will assess the types of personal data potentially exposed, the scope and nature of the alleged breach, and the risks posed to affected data subjects. Regulators will also review the response measures taken by the organisations involved if the breach is confirmed.
The investigation also involves Sterling Bank and other stakeholders connected to the digital payment ecosystem.
NDPC National Commissioner and Chief Executive Officer, Vincent Olatunji, has directed that companies operating digital payment platforms without adequate safeguards required under the Nigeria Data Protection Act 2023 will face regulatory examination as part of efforts to strengthen compliance.
The commission said the probe is intended to ensure that organisations handling sensitive financial and personal data implement proper technical and organisational protections in line with Nigeria’s data protection regulations.
The investigation comes at a time when regulators are intensifying oversight of digital payment providers amid growing concerns about cybersecurity vulnerabilities that could expose millions of users to potential data breaches.
