Nigeria’s data protection framework has undergone a major transformation in recent years, moving from a regulatory guideline system to a full statutory legal regime. The shift from the Nigeria Data Protection Regulation (NDPR) to the Nigeria Data Protection Act (NDPA) represents one of the most significant upgrades in the country’s digital governance history. For businesses, […]
Kenya’s digital governance and corporate compliance ecosystem faced a major shock when the Business Registration Service (BRS) confirmed a serious cyberattack that exposed sensitive company records. The breach, which reportedly affected millions of business records, has become one of the most significant public-sector data incidents in East Africa in recent years. For privacy professionals, compliance […]
A major global supply-chain breach has once again exposed how a single compromised software dependency can escalate into full cloud infrastructure takeover. In one of the most alarming cybersecurity incidents of 2026, threat actors leveraged a software supply-chain compromise to gain administrator-level access to Amazon Web Services (AWS) environments in under 72 hours. For CISOs, […]
Nigeria’s fast-growing fintech ecosystem is once again under intense scrutiny after a massive SMS and personal data leak involving a digital lending platform resurfaced in public discourse. The incident, linked to BestFin Nigeria’s iCredit app, exposed highly sensitive customer information including private SMS histories, OTP codes, BVN validation logs, device identifiers, and emergency contact data. […]
Nigeria’s data protection landscape is entering its most decisive compliance phase yet. With the Nigeria Data Protection Commission (NDPC) intensifying investigations, mandatory audit returns, sector-by-sector probes, and stronger financial sanctions, 2026 is shaping up to be the year the Nigeria Data Protection Act (NDPA) moves fully from policy into aggressive enforcement. For fintechs, banks, universities, […]