
By JOY ADARA, Abuja-
Nigeria Data Protection Commission (NDPC) has initiated a comprehensive, sector-wide probe into organizations suspected of breaching the Nigeria Data Protection Act (NDPA) 2023, aiming to uphold data privacy standards and bolster trust in the nation’s digital economy.
Head of Legal, Enforcement, and Regulations at NDPC, Mr. Babatunde Bamigboye, announced the initiative in a statement released on Monday in Abuja.
He emphasized that the investigation aligns with the commission’s constitutional mandate to protect the rights, freedoms, and interests of data subjects as enshrined in the 1999 Constitution.
“The NDPA is designed to fortify the legal framework of Nigeria’s digital economy, ensuring responsible use of personal data to foster trust and enable beneficial participation in regional and global markets,” Bamigboye stated.
The investigation targets a range of sectors, including insurance firms, pension companies, gaming operators, banks, and insurance brokers.
Bamigboye noted that the NDPC has issued compliance notices to specific organizations, with a list set to be published in major national newspapers on Monday.
Under the NDPA, these organizations must, within 21 days, submit evidence of their 2024 NDPA Compliance Audit Returns, details of their appointed Data Protection Officer, a summary of their data protection measures, and proof of registration as a data controller or processor of major importance.
“Failure to comply may result in enforcement actions, administrative fines, or criminal prosecution as stipulated by the NDPA,” Bamigboye warned.
He reaffirmed the NDPC’s commitment to fostering accountability and trust in Nigeria’s data protection ecosystem.
“Our goal is to safeguard data subjects’ rights while strengthening the foundation of the nation’s digital economy,” he concluded.




