NDPC Begins Sector-Wide Data Protection Compliance Enforcement
The Nigeria Data Protection Commission (NDPC) has launched a comprehensive, sector-specific compliance enforcement drive targeting organisations potentially in breach of the Nigeria Data Protection Act (NDP Act), 2023.
The NDP Act, a cornerstone of Nigeria’s digital economy, upholds the rights of data subjects and obliges organisations to handle personal data responsibly.
Invoking its powers under Sections 5(i), 6(a), 6(c), 46(3), and 47(1)-(2) of the Act, the Commission has issued Compliance Notices to selected entities across key sectors, including insurance, pensions, gaming, banking, and brokerage. A complete list of affected organisations will be made public in leading national newspapers on Monday, August 25, 2025.
These organisations are required to respond within 21 days by submitting the following:
- Proof of submission of NDP Act Compliance Audit Returns for 2024.
- Contact details and name of their designated Data Protection Officer.
- A summary of the technical and organisational measures in place for data protection.
- Evidence of registration as a Data Controller or Processor of Major Importance.
The NDPC has cautioned that non-compliance could result in enforcement actions, including the issuance of Enforcement Orders, imposition of administrative fines, or criminal prosecution.
Reiterating its commitment, the Commission emphasized its role in ensuring accountability, safeguarding public the data rights of citizens, and building a secure and trusted digital economy.
#UTVAfrica#
