Africa: Privacy

• NITDA has warned organisations and individuals about a new AI-powered malware, “Deep Load,” currently targeting entities across Nigeria. The agency noted that the malware is designed to steal sensitive information, evade traditional antivirus systems, and maintain persistent access to infected devices. The advisory underscores the need for stronger cybersecurity compliance measures, including staff awareness, multi-factor authentication, secure password practices, monitoring of suspicious activities, and prompt incident response procedures.

The Nigerian Data Protection Commission (NDPC) has announced a 60-day extension for the filing of the 2025 Data Protection Compliance Audit Returns (CAR), with the new deadline now set for 30th May 2026

Lagos, with over 22 million digitally active residents and a startup ecosystem valued at $15.3 billion, faces mounting cyber risks that have already cost Nigeria over ₦1.1 trillion in cybercrime losses.

In an increasingly digitized and globalized economy, the transfer of personal data across national borders has become an operational necessity for businesses. Nigerian companies and businesses...

This comprehensive legal update covers recent developments across South African law, from pharmaceutical naming regulations and copyright platform liability to VAT amendments affecting insurance and digital services. The collection explores emerging challenges in intellectual property protection, cryptocurrency regulation, and data brokering, while examining how AI and digital transformation are reshaping traditional legal frameworks.

• NITDA has warned organisations and individuals about a new AI-powered malware, “Deep Load,” currently targeting entities across Nigeria. The agency noted that the malware is designed to steal sensitive information, evade traditional antivirus systems, and maintain persistent access to infected devices. The advisory underscores the need for stronger cybersecurity compliance measures, including staff awareness, multi-factor authentication, secure password practices, monitoring of suspicious activities, and prompt incident response procedures.