A cybersecurity specialist highlights the growing risk of cyber exploitation faced by Nigerians due to a lack of understanding about personal data protection. Many internet users continue to share sensitive information carelessly, not realizing how cybercriminals can use these details to launch attacks. Attackers often collect names, phone numbers, and social media activities to profile and target victims. There is a misconception among many Nigerians that personal information such as certificates, phone numbers, and email addresses are insignificant, despite their security implications. Instances of leaked personal records being used for unauthorized activities have been noted. Businesses are also criticized for collecting excessive customer information without clear purposes or adequate safeguards. Many organizations gather personal data simply by imitating others, without recognizing the associated risks. Small businesses operating on social media platforms often lack structured compliance systems and may not fully understand their obligations under data protection regulations. Public awareness remains weak, with individuals frequently sharing personal details for small incentives. There is a call for stronger grassroots campaigns to educate citizens and businesses on responsible data handling and online safety, along with improved enforcement of data protection laws and increased public awareness about reporting breaches and safeguarding digital rights. Organizations are encouraged to view customer data protection as a service responsibility, not just a legal requirement.

