NDPC begins sector-by-sector probe of data protection compliance

The Nigeria Data Protection Commission (NDPC) has commenced a sector-by-sector investigation of organisations suspected of violating the provisions of the Nigeria Data Protection Act (NDPA), 2023.

In a statement signed by the Head of Legal, Enforcement and Regulations, Barrister Babatunde Bamigboye, the Commission said the move is part of its mandate to safeguard the rights and freedoms of data subjects as guaranteed under the 1999 Constitution, while also strengthening the foundation of Nigeria’s digital economy.

According to the NDPC, compliance notices have been issued to selected organisations in the insurance, pension, gaming, and banking sectors, as well as insurance brokerage firms. The full list of affected organisations will be published in major newspapers on Monday, August 25, 2025.

The notices require organisations to, within 21 days, provide evidence of filing compliance audit returns for 2024, designate or appoint a Data Protection Officer, outline their technical and organisational measures for data protection, and show proof of registration as a Data Controller or Processor of Major Importance.

ALSO READ: Commissioner hails Tinubu’s wife, Aiyedatiwa for championing women’s empowerment in Ondo

The Commission warned that failure to comply with the notice may lead to enforcement actions, including administrative fines, enforcement orders, or criminal prosecution in line with the provisions of the NDPA, 2023.

“The NDPC remains committed to building a culture of accountability and trust in Nigeria’s data protection and privacy ecosystem while safeguarding the rights of data subjects and strengthening the nation’s digital economy,” the statement read.

ALSO READ TOP STORIES FROM NIGERIAN TRIBUNE