The NDPC has launched a probe into 1,369 firms suspected of breaching Nigeria’s Data Protection Act.
Banks, insurers, pension operators, and gaming firms have 21 days to prove compliance.
The Nigeria Data Protection Commission (NDPC) has initiated a comprehensive investigation into 1,369 organizations suspected of breaching the Nigeria Data Protection Act (NDPA) 2023.
According to a statement on Monday by Mr. Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at the NDPC, the probe targets sensitive sectors including banking, insurance, pensions, and gaming.
Out of the flagged companies, 795 are financial institutions, 392 are insurance brokerage firms, 35 are insurance companies, 10 are pension operators, and 136 are gaming firms. All have been given 21 days to provide evidence of compliance or face sanctions.
The Commission explained that the exercise is part of its mandate to safeguard citizens’ constitutional rights while boosting trust in Nigeria’s digital economy. Companies are required to submit proof of:
- Filing their 2024 compliance audit returns
- Appointment of a Data Protection Officer with full contact details
- Summary of technical and organizational data protection measures
- Sign up as a data controller or processor of significant relevance.
Failure to comply with these requirements within the given period could result in penalties.
The NDPC has increasingly cracked down on companies breaching data privacy rules. Earlier this year, it fined Multichoice Nigeria ₦766.2 million for violating the NDPA, its largest sanction since the Act came into effect in 2023.
National Commissioner, Dr. Vincent Olatunji, explained that while the Commission prefers a remediation approach to help businesses adjust, organizations unwilling to comply would face heavy fines.
“Usually, when we investigate and find a breach, if they are ready to comply with the law, what is the point of making noise? It’s only when an organization is unwilling to comply that we are forced to impose sanctions,” Olatunji said.
He stressed that the NDPC considers the broader economy in its enforcement strategy, aiming to ensure compliance without discouraging investments.
