The Nigeria Data Protection Commission says reforms launched since 2023 have turned the country into a reference point for data protection and privacy in Africa. Officials credit President Bola Tinubu’s prompt assent to the 2023 Data Protection Act and early policy direction from NDPC chief executive Vincent Olatunji for strengthening the ecosystem.
The commission said the law created clear regulatory and supervisory powers, opened new opportunities in the data economy and placed stronger obligations on organisations handling personal data. Banks, schools, hospitals, insurers, telecoms firms and online platforms have been put under stricter oversight, with some sanctioned for data breaches.
According to the NDPC, Nigeria’s consistent enforcement and regulatory clarity have attracted attention from across the continent. In the last two years, data regulators from at least eight African countries have visited to study the Nigerian framework with a view to replicating parts of it at home.
Delegations came from Somalia, Uganda, Botswana, the Kingdom of Eswatini, Mozambique, Sierra Leone, Tanzania and The Gambia between July and September 2025. Their visits focused on regulatory experience, institutional structure and practical lessons in running an effective data protection authority.
Nigeria has also domesticated Data Protection Officer certification, helping to build local competence and reduce reliance on foreign certifications paid for in foreign currency. More than 500 Data Protection Officers have now received certification, expanding the pool of professionals who can support compliance across sectors.
To deepen awareness, the commission launched the Virtual Privacy Academy, a Nollywood styled online platform that delivers structured training and public sensitisation on privacy rights. The NDPC says the academy helps position data subjects as critical stakeholders and improves understanding among data controllers and processors.
The NDPC has also issued the Nigeria Data Protection Act General Application and Implementation Directive to give clearer operational guidance on how the law should be applied. In addition, the Act has been translated into Hausa, Igbo and Yoruba to make its provisions accessible to more Nigerians and promote inclusion.
Head of Corporate Communications Itunu Dosekun said the commission has run targeted capacity building programmes for ministries, departments and agencies to improve data governance and responsible handling of citizens’ information. He noted that NDPC has received several awards, including Outstanding Data Protection Authority of the Year at the Picasso Awards Africa.
The commission has signed various memorandums of understanding with organisations such as MasterCard, Digital Africa Consult, Smart Comply Technologies, ISACA and the Bauchi State Government. These partnerships aim to expand NDPC operations, strengthen enforcement and support innovation in data and privacy protection nationwide.