The Nigeria Data Protection Commission (NDPC) has sent a clear warning to businesses handling personal data: it’s time to take data protection seriously. Starting in 2025, companies that fail to comply with the Nigeria Data Protection Act (NDPA) will face substantial penalties.

For years, the NDPC avoided imposing fines, but that leniency is coming to an end. Vincent Olatunji, the Commission’s head, announced plans to enforce the rules vigorously, marking a new era for data regulation in Nigeria. According to Olatunji, the NDPC is determined to hold data controllers and processors accountable to ensure Nigerians’ personal information is adequately safeguarded.

Deadlines and Opportunities

The NDPC has set a deadline for compliance. By December 31, 2024, organisations that handle personal data — including banks, telecom companies, schools, and insurers — must register with the Commission. From January 2025, these entities will also be required to submit audit reports detailing how they are protecting the data in their care. This move aims to enhance transparency and enforce compliance across all sectors.

Beyond fines, the NDPC is also focused on capacity building. The Commission has trained a new wave of data protection professionals who are now available to help businesses navigate compliance. This initiative not only supports businesses but also creates job opportunities in a growing industry.

Additionally, the NDPC plans to continue educating Nigerians about their rights under the NDPA, empowering individuals to demand better protection of their personal information.

A New Era of Accountability

This renewed push for data privacy comes after President Bola Tinubu signed the Data Protection Bill into law in June 2023. The NDPC, which succeeded the National Data Protection Bureau, is now equipped with stronger enforcement powers. Registration, Olatunji explained, is crucial for the NDPC to track and monitor organisations handling Nigerians’ data.

The stakes are high, and 2025 is set to be a defining year for data privacy in Nigeria. It is a year in which businesses operating in Nigeria must either comply with the NDPC’s strict guidelines or face steep consequences.

I love to write about the things I love to read about. That includes sports, tech, DIYs, literature, music and entertainment. When I'm not writing, I'm either sleeping, reading, watching a funny Netflix series or eating a bowl of abula.

Leave a Reply

Your email address will not be published. Required fields are marked *

Instagram

This error message is only visible to WordPress admins

Error: No feed found.

Please go to the Instagram Feed settings page to create a feed.