Stakeholders Advocate Stronger Internal Data Protection Measures Amid 281,500 Accounts Breach

Nigeria’s worsening data breach crisis has intensified concerns over the protection of personal information, with fresh industry data showing that more than 281,500 user accounts were compromised in the first quarter of 2026, placing the country among the world’s most breached nations.

The development has heightened calls for stronger internal data protection measures as businesses and regulators seek to curb vulnerabilities linked to human error and weak workplace compliance.

Against this backdrop, fintech firm PalmPay has partnered with the Nigeria Data Protection Commission (NDPC) and compliance advisory firm TechHive Advisory to strengthen privacy awareness through a two-day employee training programme and the launch of a Privacy Champions Programme.

The initiative comes amid growing concerns that while cyberattacks continue to evolve, internal lapses remain a major source of data leaks despite increased investments in cybersecurity technologies.

Speaking on the initiative, PalmPay managing director, Chika Nwosu, said protecting customers’ personal information remains central to sustaining trust in digital financial services.

“Protecting customer information is fundamental to maintaining the trust our customers place in us every day and remains central to our operations,” he said.

Highlighting the scale of the challenge, Nwosu noted that an estimated one in every 10 Nigerians has been affected by data breaches, underscoring the need for stronger internal safeguards.

“Statistically, 10 out of 100 Nigerians have been affected by data breaches. Hence, we have a greater responsibility to ensure that personal information is collected, processed, stored and protected responsibly. This specialised training reflects our continued investment in strengthening internal awareness and ensuring our teams remain equipped to uphold the highest standards of data privacy and protection,” he stated.

Officials of the NDPC stressed that building a privacy-conscious workforce has become increasingly important as organisations process growing volumes of personal data in Nigeria’s expanding digital economy.

According to the Commission, effective data protection goes beyond regulatory compliance, requiring organisations to embed privacy awareness into their daily operations and strengthen employee accountability.

The workshop, facilitated by the NDPC alongside TechHive Advisory, also reinforced the implementation of the Nigeria Data Protection Act (NDPA) 2023, amid increasing reports of unauthorised access, phishing attacks and insider-related data leaks.

Experts at the event warned that although external cyberattacks often attract greater public attention, internal operational lapses remain one of the least-addressed threats to data security.

As part of the initiative, PalmPay introduced a Privacy Champions Programme, which will designate employees across various departments to promote responsible data handling and reinforce privacy best practices within the organisation.

Privacy advocates believe the model could gain wider adoption across Nigeria’s financial services industry as firms seek to strengthen internal governance and maintain customer trust.