The Nigeria Data Protection Commission (NDPC) has commenced a sector-by-sector investigation into organisations suspected of violating the Nigeria Data Protection Act (NDP Act), 2023.
According to the Commission, the move is in furtherance of its statutory mandate to “safeguard the fundamental rights, freedoms, and interests of data subjects as guaranteed under the Constitution of the Federal Republic of Nigeria, 1999.”
The NDP Act, 2023 also seeks to strengthen the legal foundations of Nigeria’s digital economy while ensuring the country’s trusted participation in the global space through the responsible use of personal data.
Citing Sections 5(i), 6(a), 6(c), 46(3), and 47(1)-(2) of the NDP Act, NDPC disclosed that Compliance Notices have already been issued to certain organisations drawn from insurance companies, pension managers, gaming operators, banks, and insurance brokers.
“The list of these organisations will be published on Monday, 25th August 2025, in some major newspapers across the country,” the Commission confirmed.
As part of their obligations, the affected organisations are required to provide, within 21 days of issuance:
”Evidence of filing NDP Act Compliance Audit Returns for 2024 (S.6(d)).
”Evidence of designation or appointment of a Data Protection Officer, including name and contact details (S.32).
”Summary of technical and organisational measures for data protection within the organisation (S.39).
”Evidence of registration as a Data Controller or Processor of Major Importance (S.44)”.
The Commission further warned that failure to comply may attract stiff sanctions.
“Failure to comply with this Compliance Notice may result in enforcement actions, including the issuance of an Enforcement Order, administrative fines, and/or criminal prosecution in accordance with the NDP Act, 2023,” NDPC stated.
Reiterating its resolve, the Commission assured Nigerians of its commitment to accountability and trust in the nation’s data protection ecosystem.
“We remain committed to safeguarding the rights of data subjects and strengthening Nigeria’s digital economy through a culture of compliance and transparency,” said Babatunde Bamigboye, Esq., Head, Legal, Enforcement and Regulations, NDPC.