The Nigeria Data Protection Commission (NDPC) has unveiled plans to enhance enforcement and levy significant fines on data controllers and processors that violate the Nigeria Data Protection Act (NDPA) of 2023.
This announcement was made by the national commissioner of the Commission, Dr. Vincent Olatunji in a video outlining the commission’s 2025 agenda, shared on its social media platforms.
Olatunji declared, “For data controllers and processors, there is going to be massive enforcement. We have never really issued any fine, but going forward, you’ll hear us giving heavy penalties.” He reassured Nigerians that their data rights, as enshrined in the NDPA, will be strictly protected and defaulters will face severe consequences.
The commissioner highlighted the NDPC’s proactive engagement with stakeholders across the public and private sectors to foster awareness and compliance with its mandate. These efforts have led to the signing of memorandums of understanding (MOUs) with key organisations, including the National Insurance Commission (NAICOM), National Lottery Regulatory Commission (NLRC), the Data Privacy Office of Canada, the Dubai International Financial Centre Authority (DIFC), among others.
Olatunji further revealed that, in 2025, the NDPC will progress to the second phase of its Strategic Roadmap and Action Plan (NDP-SRAP 2023-2027). This phase is anticipated to generate employment opportunities within Nigeria’s burgeoning data protection and privacy ecosystem, especially for young professionals. He noted that the commission has been actively training Nigerians in data protection and privacy, creating a talent pool of globally competitive experts in the sector.
“There are a lot of data controllers and processors looking for skilled workers. Those we trained and certified in 2024 will be further equipped in 2025 to enter the job market and contribute to the sector,” he said.
The NDPC will also sustain nationwide campaigns to promote awareness of data protection. These initiatives aim to educate citizens about their rights and the significance of data privacy while reminding data controllers and processors of their obligations under the NDP Act. Olatunji stressed that these efforts align with the broader goal of embedding a robust culture of data protection in Nigeria.
As part of its international engagements, Nigeria will host the “Network of African Data Protection Authorities Conference” in May 2025. The event is expected to attract representatives from over 40 nations with existing data protection laws. Olatunji noted that this conference would position Nigeria as a leader in the data protection landscape and bring substantial economic benefits to the country.
The NDPC reaffirmed its commitment to making data protection and privacy a cornerstone of Nigeria’s digital economy, fostering trust and driving sustainable growth.
