Archive · Investigations
All 4 archive entries filed under investigations, most recent first.
The NDPC confirmed on 17 April 2026 that it is investigating a reported breach of the Corporate Affairs Commission's database under section 46(3) of the NDPA 2023, alongside a coordinated Federal Government cybersecurity response. The CAC holds identity and corporate data on effectively every registered business and director in Nigeria.
Kenya's ODPC opened a suo moto investigation into Ray-Ban Meta smart glasses in April 2026, following a direct appeal filed 6 March 2026 that raised concerns over the devices' embedded recording capabilities. The privacy exposure identified runs two ways: bystanders captured on camera have not consented, and recorded data flows into Meta's cloud infrastructure, raising cross-border transfer questions.
On 1 April 2026, the NDPC served a Notice of Investigation over a data protection compliance failure linked to a cybersecurity incident, with the Federal Government simultaneously moving to strengthen national cybersecurity.
On 17 February 2026, the NDPC ordered an immediate investigation into Temu (Whaleco Technology / PDD Holdings) over how the platform collects, processes and transfers Nigerian users' personal data, with cross-border transfers as the stated focus. The probe is the first major investigation of a global e-commerce platform under the NDPA 2023 and GAID framework, and it grew out of the sector-wide investigation of 1,368 organisations that the NDPC launched in August 2025.
Enforcement decisions, new laws and regulatory movement across African jurisdictions, in one brief. Free, and built to be forwarded to the colleague who needs it.
Your address goes to our email service provider and is used to send you the Digest, nothing else. Unsubscribe in one click, in every issue. Privacy policy. This site itself sets no cookies.