The National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission (NDPC), Dr Vincent Olatunji, has stressed that data privacy, data protection, and cybersecurity are “inseparable pillars of the digital age” and must remain central to Nigeria’s digital transformation agenda.
Dr Olatunji made this assertion while delivering a keynote address titled “Data Privacy and Protection: Nigeria’s Roadmap to Compliance” at the ongoing National Cybersecurity Conference in Abuja.
He explained that while data protection involves safeguarding personal information from misuse, cybersecurity protects the underlying systems that store and process this data.
“Data privacy is a fundamental human right. It empowers individuals to control how their personal information is collected, used, and shared,” he stated.
“Strong cybersecurity is vital to ensure the confidentiality, integrity, and availability of personal data. In turn, robust data protection frameworks guide effective cybersecurity strategies and cultivate a culture of privacy.”
Highlighting Nigeria’s recent progress, Dr Olatunji noted the country’s Tier 3 (“establishing”) position in the 2024 Global Cybersecurity Index, as well as its leading status in Africa in the field of data protection. He outlined the country’s journey toward comprehensive data governance, which culminated in the signing of the Nigeria Data Protection Act (NDP Act) 2023 by President Bola Ahmed Tinubu (GCFR).
He described the NDP Act as a foundational piece of legislation in Nigeria’s digital economy:
“The Act regulates the processing of personal data within Nigeria and guarantees individuals’ privacy rights. It applies to both domestic and international data controllers and processors handling the data of Nigerian citizens.”
Also Read: Nigeria Launches Virtual Academy to Strengthen Data Protection
The Act provides clear provisions on data collection, storage, consent, the rights of data subjects, and penalties for non-compliance.
As a demonstration of the Commission’s enforcement powers, Dr Olatunji cited the recent fine of ₦766.2 million issued against MultiChoice for violations of data protection regulations. He also disclosed that the NDPC has generated over ₦2 billion in revenue over the past two years. The data protection sector is now valued at ₦16.2 billion, with significant job creation accompanying its growth.
He further highlighted the sector’s expansion, noting that 455 Data Protection Officers (DPOs) have been certified under the National Certification Programme, and 3,343 Data Protection Compliance Organisations (DPCOs) are expected to be verified by 2025.
Despite this progress, Dr Olatunji acknowledged the need for continued improvement in areas such as institutional capacity, data literacy, workforce development, and cross-sector collaboration.
In closing, he called on stakeholders across public and private sectors to:
“Embrace a culture of data protection, adopt robust cybersecurity practices, and stay informed of evolving regulatory frameworks. These steps are essential for reducing risk, safeguarding national assets, and driving sustainable growth.”
