When a data protection complaint arises in Nigeria, should a data subject go to the NDPC before going to court? This essay examines the procedural uncertainty surrounding Sections 46, 50 and 51 of the Nigeria Data Protection Act 2023, recent judicial treatment, and the case for clearer rules on exhausting administrative remedies.

Most people discover that a company has been hacked through rumors, social media posts, or suspicious account activity long before they hear from the company itself. This article examines what businesses are actually required to do under Nigeria’s Data Protection Act when personal data is compromised and what rights individuals have when silence follows a breach

Nigeria’s proposed Fintech Regulatory Commission promises coordination in a rapidly evolving sector, but does creating another regulator solve fragmentation or simply multiply it? This piece examines the Bill’s legal architecture and explores the risks of overlapping mandates, regulatory duplication, and increased compliance burdens.