The Nigerian Data Protection Commission (NDPC) has launched an industry-wide investigation into 1,369 organizations suspected of violating provisions of the Nigerian Data Protection Act, 2023 (NDPA).
According to a statement issued on Monday by the NDPC’s Head of Legal, Enforcement and Regulation, Mr. Babatunde Bamigboye, the investigation targets companies in sensitive sectors such as banking, insurance, pensions, gaming, and insurance brokerage.
The commission has also given companies, including 795 financial institutions, 21 days to provide evidence of compliance with the NDPA or face sanctions.
The list of companies released by the commission also includes 392 insurance brokerages, 35 insurance companies, 10 pension companies, and 136 gaming companies.
Compliance audits are ongoing
Bamigboye explained that the move is in line with the NDPC’s mandate to protect the rights and freedoms of data subjects as enshrined in the 1999 Constitution while strengthening Nigeria’s digital economy.
- He stressed that responsible handling of personal data is crucial for the country to confidently participate in regional and global markets.
- According to him, the Commission has already issued compliance notices to these organizations, requiring them to demonstrate compliance with key provisions of the NDPA.
- This includes submitting a compliance audit report for 2024, appointing a data protection officer with full contact details, an overview of technical and organizational data protection measures, and confirmation of registration as a significant data controller or processor.
“These organisations must provide evidence of their compliance with the National Data Protection Act, 2024, audit reports, and the designation or appointment of a Data Protection Officer (including name and contact details) within 21 days of publication.
The Commission said you must also provide a summary of the technical and organisational measures for data protection within your organisation, as well as proof of registration as a ‘significant data controller or processor’.
What you should know
Nigeria’s National Data Protection Commission (NDPC) recently fined Multichoice Nigeria N766.2 million for breaches of the National Data Protection Act (NDPA). This is the largest single fine imposed by the Commission since the Act came into force in 2023.
This is due to the NDPC’s remedial measures, which ensure companies found to have breached the law take the corrective actions to avoid fines.
NDPC National Commissioner Dr Vincent Olatunji recently told Nairametrics that remedial measures are being taken to ensure business sustainability, but noted that any company that fails to comply with remedial recommendations will be fined.
“Usually, when we investigate and find violations, it’s because the company is willing to comply with the law. So why make a fuss?”
“We only have to impose sanctions when an organization is unwilling to comply with the law,” he said.
He also added that the committee also takes into account the country’s economic situation and will not make any statements that may hinder investment.
Published in Technology
Samson Akatakpo is a passionate tech enthusiast with over a decade of experience in covering and analyzing the tech industry. He currently serves as the Tech Analyst at Business Times.
- Nigeria’s telecoms sector to shift from consolidation to enlargement in 2026 – ATCON
- Meta acquires AI startup Manus in $2bn deal to spice up AI choices
- NCC indicators shift to direct-to-mobile satellite tv for pc connectivity in 2025–2030 roadmap
- Broadband penetration crosses 50% in November, as Nigeria misses goal
- Nigeria in talks with Google on new undersea cable for digital resilience
Be First to Comment