Book a Consultation

Yoakelegal@gmail.com
+234 903 069 1065
1822, Chief Yesufu Abiodun Oniru Road,
Oniru, Victoria Island, Lagos, Nigeria

Practice area

Digital Lending Advisory

Digital lending in Nigeria is now closely supervised. Building it properly is far cheaper than retrofitting.

Overview

What this work involves

Digital lending has moved from an unregulated frontier to an area of active supervision, driven largely by concerns about recovery practices and the handling of borrowers' personal data.

Operators now face approval requirements, consumer protection expectations and data protection obligations that touch nearly every part of the product. We advise lenders, platforms and their suppliers on how those apply to their model, and on building products that withstand scrutiny.

What we help clients with

The work, set out plainly.

  1. Regulatory approvals

    Which approvals and registrations apply to your lending activity, and support with the applications.

  2. Loan documentation

    Agreements, terms and disclosures written to be understood by the borrower as well as enforceable.

  3. Data protection by design

    Lawful bases, consent practices, device permissions, retention and third-party data sharing.

  4. Recovery and collections

    Reviewing collections processes against regulatory expectations and consumer protection standards.

  5. Consumer protection

    Pricing transparency, complaint handling and fair treatment obligations.

  6. Platform agreements

    Arrangements between lenders, technology providers and funding partners.

Typical matters

Examples of instructions in this area.

These illustrate the kind of work this practice area covers. They are not descriptions of specific client matters.

  • Advising a lending platform on the approvals its model requires
  • Reviewing loan terms and in-app disclosures
  • Advising on app permissions and their data protection implications
  • Reviewing a collections and recovery process
  • Responding to a regulatory or data protection inquiry

Frequently asked questions

Questions we are asked most often.

It depends on the model: who holds the credit risk, whose balance sheet funds the loan, and how the product is presented. Expectations in this area have developed considerably and continue to. Do not assume a structure used by another operator fits yours. The analysis has to be done on your own facts.

Requesting broad device permissions and using contact data for recovery has attracted significant regulatory and public scrutiny, and raises clear issues around necessity, consent and proportionality. We advise clients to be conservative and design around what can actually be justified.

Broadly, practices that harass, shame, mislead, or involve contacting third parties who never agreed to anything. Beyond regulatory exposure, they create reputational damage that is hard to undo. We review scripts, timelines, escalation and third-party agency arrangements.

Before you build. The requirements shape the product: what data you collect, what permissions you request, how pricing is disclosed, how recovery works. Retrofitting compliance into a launched product costs materially more.

These answers are general. They describe how things usually work, not how they will work in your situation. Requirements and timelines change. Please take advice before acting.

Related insights

Further reading

View All Insights

Other practice areas

You may also need

Regulatory Compliance

Working out which regulators apply to you, and building a system that keeps up with them.

Explore

Speak to a lawyer

Have a legal question?
Let’s talk.

Tell us what you are dealing with. We will explain your options in plain English and what it would take to move forward.