The Federal Government of Nigeria is pivoting toward a more collaborative defense strategy against digital threats. In a dual-pronged approach, the government has announced the formation of a Cybersecurity Coordination Council while simultaneously launching a high-profile investigation into alleged data breaches within the financial sector.
Going by this, Dr. Bosun Tijani, the Minister of Communications, Innovation, and Digital Economy, outlined a new policy direction focused on shared responsibility. The proposed Cybersecurity Coordination Council will serve as a bridge between the public and private sectors.
The Council focuses on three key objectives to enhance national security. First, it aims to build collective resilience by strengthening the nation’s ability to withstand sophisticated cyberattacks. Second, it seeks to improve early detection by increasing the speed at which threats are identified across both government and industry networks. Finally, the Council promotes sustained engagement by building a partnership-led model that includes civil society and private enterprise to protect national digital infrastructure.
”Cybersecurity is a shared national responsibility. Protecting Nigeria’s digital economy requires strong partnerships, trusted collaboration, and collective vigilance,” Dr. Tijani said.
While the Ministry focuses on future coordination, the Nigeria Data Protection Commission (NDPC) is actively enforcing current regulations. The Commission has officially begun investigating an alleged data breach involving prominent entities, including Remita Payment Services Ltd and Sterling Bank.
According to Babatunde Bamigboye, Head of Legal, Enforcement & Regulations at the NDPC, a formal Notice of Investigation was served on April 1, 2026.
The NDPC investigation currently covers several critical areas of concern. The commission is analyzing the specific types of personal data that were compromised as well as the overall nature and scope of the alleged breach. Additionally, the investigation evaluates the potential risks posed to the affected data subjects and the effectiveness of the mitigation measures taken by the companies involved. Finally, the commission is conducting a system-wide compliance check to ensure all standards are being met.
The investigation isn’t limited to the parties mentioned above. Dr. Vincent Olatunji, the National Commissioner/CEO of the NDPC, has ordered a wider review of the digital payment ecosystem.
Under the Nigeria Data Protection Act (NDP Act) 2023, any organization using digital payment systems must implement rigorous technical and organizational security measures. Companies found operating without these safeguards will face scrutiny to ensure the overall integrity of Nigeria’s digital economy.