The Nigerian Data Protection Commission (NDPC) continues to record measurable progress in strengthening Nigeria’s data protection framework, with capacity building emerging as a central pillar of its impact just two years after its establishment.
This progress was recently underscored at a media capacity-building engagement held at the Marriott Hotel, Ikeja, Lagos. The event brought together journalists and media stakeholders to deepen their understanding of data protection issues and reinforce the media’s critical role in safeguarding public interest. The engagement reflected the Commission’s people-centred regulatory philosophy—one that places emphasis on education, collaboration, and public trust, rather than enforcement alone.
During the session, NDPC officials deliberately moved beyond technical jargon, translating data protection principles into practical, real-life issues that affect everyday Nigerians. Discussions focused on how personal data is collected, processed, and protected, as well as the options available to individuals when their privacy rights are violated. By equipping journalists with clear and actionable knowledge, the Commission aims to promote accurate and responsible reporting that helps citizens better understand and assert their data rights.
Speaking virtually to the press, the National Commissioner of NDPC, Dr Vincent Olatunji, reflected on the Commission’s journey over the past two years, describing it as a period of steady institutional growth, learning, and increasing international recognition. He attributed much of this progress to deliberate investments in capacity development across Nigeria’s data protection ecosystem.
According to Dr Olatunji, these efforts have helped position Nigeria more prominently on the global data privacy map, attracting confidence and engagement from international partners. Beyond visibility, the impact has been tangible. The data protection ecosystem has enabled the creation of over 23,000 jobs, while generating significant economic value through compliance activities, professional services, and training programmes.
He was quick to clarify, however, that NDPC was not established as a revenue-generating agency. “Our mandate is about people,” Dr Olatunji emphasised, noting that the Commission exists primarily to protect the personal and sensitive data of Nigerians and to build trust in the country’s rapidly expanding digital economy.
NDPC Strengthens Compliance, Economic Value, and Global Partnerships
This people-first approach is evident in the Commission’s broad achievements. NDPC has expanded compliance monitoring across both public and private sectors, with over 38,600 registered Data Controllers and Processors of Major Importance (DCPMIs), 307 licensed Data Protection Compliance Organisations (DPCOs), and more than 8,155 compliance audit returns filed under the Nigeria Data Protection Act (NDP Act), 2023. In addition, 246 data protection and privacy breach investigations have been concluded, alongside enforcement actions and the issuance of the General Application and Implementation Directive (GAID).
From an economic perspective, the ecosystem has grown steadily, now valued at over ₦16.2 billion, with more than ₦2 billion generated in compliance-related revenue. These developments have further strengthened Nigeria’s attractiveness as a destination for foreign direct investment, supported by the presence of an independent data protection authority—an increasingly critical requirement for international business confidence.
On the global stage, the Commission has earned recognition, including the Picasso Award for Best Data Protection Authority in Africa, while expanding international cooperation through memberships in the Global Privacy Assembly (GPA) and the Network of African Data Protection Authorities (NADPA), alongside multiple cross-continental partnerships.
Capacity building and public awareness remain central to NDPC’s strategy. The Commission has successfully conducted the maiden National Data Protection Officer (DPO) Certification Examination, certifying 494 professionals, delivered 168 training programmes reaching over 104,700 beneficiaries, and launched initiatives such as the Virtual Privacy Academy, youth-focused data protection programmes, Digital Privacy Awareness Campaigns, and Data Privacy Clubs across tertiary institutions nationwide.
Established under the Nigeria Data Protection Act, 2023, the NDPC serves as Nigeria’s independent regulatory authority responsible for overseeing and enforcing data protection and privacy. The Commission safeguards the rights of data subjects, regulates the processing of personal data, and promotes responsible data governance across both public and private sectors.
As Nigeria’s digital ecosystem continues to evolve, effective data protection remains critical to public trust, innovation, and sustainable economic growth. Through regulation, capacity building, and sustained public engagement, the NDPC is steadily shaping a data governance culture that protects citizens, supports innovation, and strengthens confidence in Nigeria’s digital future.
For more insights on Nigeria’s digital governance, data protection policies, and regulatory developments, read more expert coverage at LouisaOlaniyi.com.ng.
