top of page


When They Get Hacked: What Companies Are Actually Required to Do With Your Data
Most people discover that a company has been hacked through rumors, social media posts, or suspicious account activity long before they hear from the company itself. This article examines what businesses are actually required to do under Nigeria’s Data Protection Act when personal data is compromised and what rights individuals have when silence follows a breach
May 65 min read


Regulatory Consent as Transaction Risk in Nigeria’s Post-2024 Upstream M&A
Regulatory approval in Nigeria’s upstream oil and gas sector is no longer a procedural formality. This paper examines how post-2024 petroleum regulations have transformed regulatory consent into a major source of transaction risk, reshaping deal structuring, valuation, due diligence, and execution in upstream M&A.
Mar 231 min read


The Nigerian Fintech Commission Bill: Reform or Regulatory Redundancy?
Nigeria’s proposed Fintech Regulatory Commission promises coordination in a rapidly evolving sector, but does creating another regulator solve fragmentation or simply multiply it? This piece examines the Bill’s legal architecture and explores the risks of overlapping mandates, regulatory duplication, and increased compliance burdens.
Mar 105 min read


Introducing Trellis Africa: Building Compliance Infrastructure for Modern African Businesses
This piece introduces Trellis Africa, a compliance infrastructure enterprise built to help African businesses develop the systems, governance structures, and operational foundations required for sustainable growth.
Dec 31, 20253 min read
bottom of page
_edited.png)