The Nigeria Data Protection Commission (NDPC) has issued a stern warning to institutions and organizations found to be mishandling citizens’ data, signaling its intent to impose the maximum penalties on violators as part of a concerted effort to bolster enforcement in 2025.
Dr. Vincent Olatunji, National Commissioner and Chief Executive Officer, stressed the critical need to safeguard data integrity and assured that the Commission will enhance its enforcement strategies to hold accountable sectors such as banking, healthcare, education, insurance, telecommunications, and government agencies.
In a statement from the Commission’s Media Department, Dr. Olatunji emphasized the necessity for data controllers and processors to prioritize data security, asserting that the NDPC will adopt a zero-tolerance policy for breaches. While the Commission had previously refrained from imposing fines, significant penalties will be implemented moving forward for non-compliance with data protection regulations. The enhanced enforcement efforts are aimed at protecting the data rights of Nigerian citizens, as outlined in the Nigeria Data Protection Act (NDPA).
Dr. Olatunji also highlighted the Commission’s ongoing efforts to engage with both public and private stakeholders to promote awareness and compliance. These initiatives have already resulted in the signing of Memorandums of Understanding (MOUs) with prominent organizations, including the National Insurance Commission (NAICOM), the National Lottery Regulatory Commission (NLRC), the Data Privacy Office of Canada, and the Dubai International Financial Centre Authority (DIFC).
