By 
The Nigeria Data Protection Commission (NDPC) is intensifying efforts to increase awareness about the Nigeria Data Protection Act (NDPA) to ensure compliance among organizations and relevant stakeholders.
Speaking on Wednesday at the one-year implementation anniversary of the NDPA in Abuja, NDPC’s National Commissioner, Dr. Vincent Olatunji, emphasized the importance of compliance to build public trust and enhance business opportunities. He noted that the NDPA, signed into law by President Bola Tinubu on June 12, 2023, provides a comprehensive legal framework for the processing and protection of personal information.
Olatunji highlighted the potential consequences of non-compliance, including public distrust and loss of business. He stated that while the Act prescribes penalties for non-compliance, the commission’s primary focus is on fostering a culture of compliance rather than penalizing defaulters.
“The main challenge we face in promoting data privacy is awareness. Many organizations are either unaware of the data protection law or do not fully understand it,” Olatunji said. “When we engage with them, they are generally willing to comply because they see the value. Compliance enhances trust and business opportunities, while breaches can result in financial losses.”
He further noted that the private sector has shown higher compliance rates compared to the public sector. “When we started, the private sector compliance was around 49 percent, while the public sector was at 4 percent. Today, private sector compliance has risen above 55 percent, and the public sector has reached 15 percent,” he added.
To improve awareness and compliance, the NDPC is actively engaging with Chief Executive Officers of government institutions and other stakeholders. The commission received approximately 1,000 complaints about data breaches in the past year, with a significant number involving digital loan companies, referred to as loan sharks. Investigations have also been conducted in sectors such as education, finance, real estate, insurance, consulting, and schools.
“To date, we have completed four major investigations, and some organizations have paid remediation fees. Depending on the nature and impact of the breach, as well as the level of cooperation, we have collected N400 million in remediation fees,” Olatunji reported.
He acknowledged the challenges posed by Nigeria’s large population and vast geography, which complicate the commission’s efforts to address data privacy violations, especially from operators in unknown locations.
Dr. Olatunji reaffirmed the NDPC’s commitment to building a culture of compliance and ensuring that data protection becomes a standard practice across all sectors in Nigeria.
Comments