The Nigeria Data Protection Commission (NDPC) has issued a stern warning to institutions and organizations mishandling citizens’ data, vowing to impose maximum penalties on violators.
Speaking on the matter, the National Commissioner and Chief Executive Officer, Dr. Vincent Olatunji, emphasized that the warning is crucial as the Commission plans to enhance its enforcement mechanisms in 2025, reports The Nation.
Sources reveal that the NDPC will focus on sectors such as banking, healthcare, education, insurance, telecommunications, and government agencies responsible for safeguarding citizens’ data.
In a statement released by the Commission’s Media Department, Dr. Olatunji urged data controllers and processors to prioritise the safety and integrity of the data entrusted to them, highlighting the Commission’s zero tolerance for breaches.
“For data controllers and processors, there is going to be massive enforcement. We have never really issued any fine, but going forward, you’ll hear us giving heavy penalties,” the NDPC boss said.
He assured Nigerians that their data rights, as guaranteed by the NDPA Act, will be fully protected, and defaulting data controllers and processors will face strict consequences.
The Commissioner highlighted the NDPC’s extensive engagements with stakeholders across public and private sectors to promote awareness and compliance with the Commission’s mandate.
He the efforts have resulted in the signing of Memorandums of Understanding (MOUs) with key organisations, including the National Insurance Commission (NAICOM), National Lottery Regulatory Commission (NLRC), the Data Privacy Office of Canada, and the Dubai International Financial Centre Authority (DIFC), among others.
Dr Olatunji said the NDPC would advance to the second phase of its Strategic Roadmap and Action Plan (NDP-SRAP 2023-2027) in 2025.
According to him the phase is expected to create job opportunities within Nigeria’s data protection and privacy ecosystem, particularly for young people.
He said the Commission has been organising training programmes for Nigerians in data protection and privacy, creating a pool of globally competitive experts within the data protection sector.
“There are a lot of data controllers and processors that are looking for people to work with them. Now those that we have trained in 2024, those we have certified, we are going to do more this year to actually launch them to the job market where they can really work with data controllers and processors,” he said.
Olatunji said the NDPC would continue its nationwide efforts to promote data protection awareness for all.
The Commission aimed to educate citizens about their rights and the importance of data privacy while reminding data controllers and processors of their obligations under the NDP Act, he said. Dr Olatunji emphasised that these initiatives are part of the broader goal to embed a culture of data protection and privacy in Nigeria.
He disclosed that Nigeria will host the “Network of African Data Protection Authorities Conference” in May 2025, with over 40 nations with existing data protection laws expected to attend.
According to Dr Olatunji, this global event will position Nigeria as a leader in the data protection ecosystem, and bring significant economic benefits to the country.
