Nigeria Data Protection Commission warns against data breaches; to impose fines

The Nigeria Data Protection Commission (NDPC) has issued a strong warning to institutions and organizations found mishandling citizens’ data, promising to impose maximum penalties on violators as part of an effort to strengthen enforcement in 2025.

 National Commissioner and Chief Executive Officer, Dr. Vincent Olatunji, emphasized the importance of safeguarding data integrity and assured that the Commission will enhance its enforcement mechanisms to hold accountable sectors such as banking, healthcare, education, insurance, telecommunications, and government agencies.

In a statement released by the Commission’s Media Department, Dr. Olatunji urged data controllers and processors to prioritize data security, warning that the NDPC’s tolerance for breaches will be minimal. He stressed that while the Commission had previously refrained from issuing fines, there would be significant penalties moving forward for those failing to comply with data protection regulations. The NDPC’s increased focus on enforcement aims to protect the data rights of Nigerians as guaranteed by the Nigeria Data Protection Act (NDPA).

Dr. Olatunji highlighted the Commission’s ongoing engagements with public and private stakeholders to foster awareness and compliance, underscoring that these efforts have led to the signing of Memorandums of Understanding (MOUs) with key organizations such as the National Insurance Commission (NAICOM), the National Lottery Regulatory Commission (NLRC), the Data Privacy Office of Canada, and the Dubai International Financial Centre Authority (DIFC).