Technology
Experts Advise African Firms Processing EU Personal Data
By Dipo Olowookere
A piece of advice has been given to organisations in Africa processing the personal information of data subjects from within the European Union (EU).
At an event hosted by Baker McKenzie and Cognia Law in Johannesburg, Head of the Technology, Media and Telecommunications Practice Group at Baker McKenzie in Johannesburg, Mr Darryl Bernstein, warned organisations doing such to already have effective General Data Protection Regulation (GDPR) compliance procedures in place, including Data Breach Security Checklists, impact assessments and subject data requests procedures.
Mr Bernstein said this due diligence is not only required by the GDPR regulation but can significantly reduce the risks associated with security breaches, raise awareness of the GDPR and ensure that companies have appropriate technical and organisational measures in place to comply with the legislation.
He further said it was essential for organisations to have a General Data Protection Regulation (GDPR) Data Security Breach Checklist in place to assess the risks of a data security breach and to implement a plan to contain and manage any data breaches.
Mr Bernstein noted that the first step on any organisation’s GDPR Data Security Breach Checklist should be to assess the risks associated with a data security breach.
“It is essential to know whose data might have been disclosed, what type of data has been breached and if it contains sensitive information.
“Affected organisations should also asses the volume of data disclosed and if any of the data has been lost or damaged. The cause of the breach and where in the world the breach occurred must also be investigated,” he said.
Mr Bernstein explained that step two on the Checklist should be to contain the breach and recover the data.
“Organisations who have fallen victim to a data breach must establish who will investigate the breach, who will assist with the containment of the breach and/or the recovery of information and if action should also be taken to prevent the breach from recurring. This is also the time to inform the police, if appropriate to do so,” the data expert said.
During step three, organisations must notify all data subjects who have had their private information breached.
“According to the GDPR, notification must take place without undue delay and no later than 72 hours after the breach has occurred. The nature and scope of the breach, as well as its consequences and the measures taken to rectify it, must also be disclosed to affected data subjects,” he said.
Mr Bernstein explained that South African organisations will have to have a similar checklist in place in order to comply to the soon to be implemented Protection of Personal Information Act (POPIA).
POPIA stipulates that a data breach must be notified as soon as reasonably possible after the discovery of the compromise, considering the legitimate needs of law enforcement or any measures reasonably necessary to determine the scope of the compromise and to restore the integrity of the responsible party’s information system.
To assist organisations in the event of a data breach, Baker McKenzie recently launched a mobile application called “Data Breach 72”. This app, which is available in English and French, allows organisations to identify the existence of a data breach, within the scope of application of the GDPR; establish whether it is necessary to notify the competent supervisory body; and prepare an initial draft of this notification. The app forms part of Baker McKenzie’s innovation programme, which aims to rethink the way in which lawyers deal with the challenges their clients are facing.
The final step in Checklist includes a thorough evaluation of the breach. “Once the first three steps are complete, organisations must investigate whether employees were responsible for the breach and if disciplinary action is required. If a third party was involved, the contract should be checked for damages provisions and an impact assessment undertaken. Lastly, organisations must review their procedures and ensure their data is secure going forward,” he said.
Also, partner in Baker McKenzie’s Corporate/M&A practice and TMT specialist, Janet MacKenzie, noted that, “The GDPR further requires organisations to complete a Data Protection Impact Assessment prior to the processing of private information, where the processing is likely to result in a high risk to the rights and freedoms of natural persons.
MacKenzie said it is essential to conduct an Impact Assessment of third parties that process high-risk company personal data, to determine their awareness of GDPR and to ensure that they have appropriate technical and organisational measures in place to comply with the legislation.
For high-risk third parties, audit partners should be identified for the assessment of processes and to determine if on-site audits are required. It is worth noting that the requirements of the GDPR stipulate that data processing can only be outsourced to a third party if the processor guarantees conformity with the requirements of the GDPR.
Janet Taylor Hall, CEO of Cognia Law, explained further, “There were two operational areas where clients tend to underestimate the impact assessment efforts around GDPR – the first being adequately preparing to deal with a data breach when it happens and the second is subject data requests, which can in themselves lead to a breach if not handled appropriately.”
“Right of access is a core principle of the GDPR. Individuals have the right to access their personal data and supplementary information at any time. In responding to these data requests in time (30 days), it is also important that no data is shared that belongs to another individual or that contains intellectual property or trade secrets,” she said.
“Putting a robust subject data request capability in place is an important part of the on-going GDPR compliance support we offer our clients”, highlighted Justin Ridl, Global Head of Legal Services, Cognia Law.
Technology
9 African Firms, Others for 2026 AWS Social Entrepreneur Accelerator Cohort
By Modupe Gbadeyanka
Nine African organisations, including Nigeria, will join 33 others from the USA, Australia, India, the UK and others for the fourth Social Entrepreneur Accelerator cohort of Amazon Web Services (AWS).
The companies from Africa chosen for the 2026 edition of this programme are from Nigeria, Kenya, Ghana, South Africa, Cameroon and Tanzania.
These founders are using cloud and AI technology to solve skills shortages, youth unemployment and food security. Building from the ground up, they are creating African solutions for African challenges.
Nigeria leads the selection with three organisations, namely Sabi Scholar, Kayode Alabi Leadership and Wetech Incorporated.
The chief executive of Sabi Scholar, Mr Divine Iloh, said he is creating an “operating system” for African higher education, enabling any university to launch online degrees in 30 days, a potential game-changer for the continent’s 200M+ youth population.
For Kayode Alabi Leadership, the founder, Hammed Kayode Alabi, is reducing inequalities by empowering underserved young people to lead and innovate through transformative education and technology-driven solutions to solve local challenges and thrive as community changemakers.
As for Wetech Incorporated, established by Gabriella Uwadiegwu, it is building Africa’s largest pipeline of women in technology, from training to mentorship to direct employment pathways.
Kenya follows with two organisations, KuzeKuze and STEM Centre Africa. According to the CTO of KuzeKuze, Enock Sangaka Mong’are, the organisation is building “education passports,” as digital records that follow learners throughout their lives, making personalised education measurable and scalable.
While STEM Centre Africa, a non-profit launched in 2017 by two brothers, Dancun, the CTO and Denish Akoum, the CEO, to promote hands-on STEM education, including coding, robotics and 3D design, reaching over 18,000 + students since inception, with 90 per cent gaining proficiency in Python, Scratch and electronics. Operating two centres in Homa Bay County with 10 organisational partners, SCA aims to reach 100,000 learners by 2030.
The remaining four spots are shared by Ghana, South Africa, Cameroon and Tanzania.
In Ghana, BASICS International, founded by CEO Patricia Wilkins, is breaking cycles of poverty by providing education, certified digital skills training and holistic support to underserved children and youth, equipping them to thrive academically, economically and socially.
For South Africa, FunHouse Digital, founded by Ayabulela Yokwana, is turning gaming lounges into self-sustaining education hubs in rural communities – profits from gaming directly fund free coding and digital literacy programs.
In Cameroon, EduCloud, founded by Rosius Ndimofor Ateh, delivers hands-on Cloud and AI workshops across Africa, bridging the gap between academic theory and industry-ready skills.
From Tanzania is Fiqra Academy, founded by CEO Gerald Revocatus. The firm is creating a direct pipeline from digital skills training to employment for East African youth, with certifications that lead to real careers through their digital learning platform.
In collaboration with Deloitte, the accelerator provides technical training, strategic business planning, and ongoing AWS and Deloitte support to help mission-driven organisations scale.
Since 2023, the programme has supported more than 100 social entrepreneurs across 34 countries, bringing together a global community of social entrepreneurs who are working to address some of the world’s most urgent challenges across education, health and climate resilience.
“Africa’s representation in this cohort reflects what we’re seeing across the continent: a generation of founders who don’t wait for conditions to be perfect. They build anyway.
“Our role is to ensure they have access to the same world-class cloud and AI technology as any startup in Silicon Valley and the support to scale impact across borders,” the General Manager for Sub-Saharan Africa at AWS, Jyoti Ball, stated.
Technology
Telco Ownership Changes Above 10% Now Subject to NCC Approval
By Adedapo Adesanya
The Nigerian Communications Commission (NCC) and the Corporate Affairs Commission (CAC) have introduced a new regulatory requirement mandating prior approval for significant changes in the ownership structure of telecommunications companies operating in Nigeria.
This was contained in a statement jointly signed by the Director of Public Affairs at the NCC, Mrs Nnenna Ukoha and Head of Public Affairs at the Corporate Affairs Commission, Mr Rasheed Mahe.
According to a joint press release issued by the two agencies, the directive, which takes immediate effect, requires all licensed telecom operators seeking to transfer ownership or control of shares amounting to 10 per cent or more of their total share capital to first obtain a Letter of No Objection from the NCC before such transactions can be registered by the CAC.
The statement reads in part, “The directive, which takes immediate effect, requires all licensed communications companies seeking to transfer ownership or control of shares amounting to 10 per cent or more of their total share capital to obtain a Letter of No Objection from the NCC before such transactions can be registered with the CAC.
“The requirement is in line with the provisions of Section 90 of the Nigerian Communications Act 2003, Regulation 28(2) of the Competition Practices Regulations 2007, and Regulation 42 of the Licensing Regulations 2019, which empower the NCC to monitor transactions involving licensees and ensure fair competition within the sector.
“Under the new arrangement, the CAC will only process and register requests for changes in shareholding structures of telecommunications companies where the transaction involves 10 per cent or more of the company’s shares and is accompanied by evidence of prior approval from the NCC.
“According to the two regulatory agencies, the measure is aimed at strengthening oversight of significant ownership changes, preventing anti-competitive practices, and preserving a fair and competitive communications market. It is also expected to enhance transparency, boost investor confidence, provide greater regulatory certainty, and support the long-term stability and sustainability of Nigeria’s telecommunications industry.
The NCC and CAC reaffirmed their commitment to fostering a transparent, stable, and investor-friendly business environment. Both agencies pledged continued collaboration to promote fair market practices, strengthen regulatory compliance, and ensure the orderly development of Nigeria’s communications sector.”
Technology
Rising Cyber Threats Could Undermine Business Sustainability, Profitability—ISSAN
By Modupe Gbadeyanka
The relevant stakeholders have been urged to take urgent action to curb the rising sophistication of cyber threats, which could undermine business sustainability and profitability.
This call was made by the Information Security Society of Africa – Nigeria (ISSAN) during its monthly meeting held in collaboration with MAXUT Consulting.
The group noted that identity theft, mobile fraud, ransomware, and social engineering attacks are threats to organisations, especially those who may struggle to protect information assets, maintain operational resilience, and address vulnerabilities before they can be exploited.
The president of ISSAN, Mr David Isiavwe, who doubles as the Executive Director for Risk Management at Nova Bank, stressed that cybercriminals are deploying increasingly sophisticated attack methods targeting individuals, businesses, critical national infrastructure, and strategic assets.
Among the threats highlighted were identity theft, Business Email Compromise (BEC), phishing, ransomware, WhatsApp account hijacking, Distributed Denial-of-Service (DDoS) attacks, payment card fraud, cryptocurrency-related attacks, and other forms of social engineering.
According to him, the increasing frequency and sophistication of cyberattacks mean cybersecurity can no longer be viewed solely as an IT issue but as a critical business and national security priority.
To address these challenges, he urged organisations to adopt proactive risk management practices, implement continuous monitoring systems, promptly address vulnerabilities, and invest in regular cybersecurity awareness programmes for employees and customers.
Also, the importance of leveraging emerging technologies such as Artificial Intelligence (AI), Machine Learning (ML), and automation to enhance threat detection and response capabilities was emphasised.
“No organisation can successfully confront today’s cyber threats in isolation. Information sharing, collaboration, and collective vigilance remain essential to protecting our digital ecosystem and safeguarding public trust,” the ISSAN leader said at the event, which featured a technical presentation titled, Confronting the New Mobile Threat Landscape: Beyond User Authentication.
ISSAN reaffirmed its commitment to promoting cybersecurity awareness, capacity building, information sharing, and industry collaboration to strengthen Nigeria’s cyber resilience and support a secure digital economy.
-
Feature/OPED6 years agoDavos was Different this year
-
Travel/Tourism10 years ago
Lagos Seals Western Lodge Hotel In Ikorodu
-
Showbiz3 years agoEstranged Lover Releases Videos of Empress Njamah Bathing
-
Banking8 years agoSort Codes of GTBank Branches in Nigeria
-
Economy3 years agoSubsidy Removal: CNG at N130 Per Litre Cheaper Than Petrol—IPMAN
-
Banking3 years agoSort Codes of UBA Branches in Nigeria
-
Banking3 years agoFirst Bank Announces Planned Downtime
-
Sports3 years agoHighest Paid Nigerian Footballer – How Much Do Nigerian Footballers Earn


