Charles Esther
The Nigeria Data Protection Commission, NDPC, has commenced a sector-wide investigation into organisations suspected of violating the provisions of the Nigeria Data Protection Act (NDP Act), 2023.
NDPC Mandate Under the NDP Act 2023
The NDP Act, 2023, was enacted to safeguard the fundamental rights and freedoms of data subjects as provided under the 1999 Constitution.
It also aims to strengthen Nigeria’s digital economy and promote responsible participation in both regional and global economies through the ethical use of personal data.
Compliance Notices Issued
According to the NDPC, compliance notices have already been issued to selected organisations as provided under sections 5(i), 6(a), 6(c), 46(3), and 47(1)-(2) of the Act.
The Commission added that a list of these organisations will be published on Monday, August 25, 2025, in major national newspapers.
Sectors Under Scrutiny
The organisations listed in the compliance notice were drawn from critical industries including insurance companies, pension firms, gaming operators, banks, and insurance brokers.
Required Submissions Within 21 Days
The Commission directed that affected organisations must, within 21 days, provide the following:
- Evidence of filing NDP Act Compliance Audit Returns for 2024 (S.6(d)).
- Evidence of appointment of a Data Protection Officer (S.32).
- Summary of technical and organisational measures for data protection (S.39).
- Proof of registration as a Data Controller or Processor of Major Importance (S.44).
Possible Sanctions for Non-Compliance
The Commission warned that failure to comply could attract enforcement measures, including the issuance of enforcement orders, administrative fines, or even criminal prosecution under the Act.
NDPC Reaffirms Commitment to Accountability
Signed by Babatunde Bamigboye, Head of Legal, Enforcement and Regulations, the statement stressed that the NDPC remains committed to entrenching accountability and trust in Nigeria’s data privacy ecosystem.
The Commission also reaffirmed its determination to safeguard citizens’ rights while boosting Nigeria’s digital economy.
