The ruling came in Emmanuel Harunna v. Nigeria Data Protection Commission, a case in which the applicant sought a court declaration that PoS agents fall outside the NDPC’s registration requirement. Most PoS agents are sole traders or micro-entrepreneurs operating with a terminal, a phone and a float. PoS agents were included in that framework, but the legal challenge brought by Emmanuel Harunna created uncertainty about whether the designation would survive judicial scrutiny. The PoS ruling extends that enforcement posture to a sector that has processed sensitive financial data at scale for years with minimal regulatory oversight. The compliance mandate now covers over 2 million PoS agents and 5.9 million terminals.