The Nigeria Data Protection Commission (NDPC) has solidified its reputation as a formidable regulator in the digital space, concluding 246 investigations into data protection and privacy breaches and generating over N5.2 billion in compliance revenue.
Vincent Olatunji, the national commissioner/CEO disclosed this at a media workshop organised by the NDPC, on Thursday, in Lagos.
These outcomes reflect a deliberate shift toward aggressive, enforcement-driven oversight under the Nigeria Data Protection Act, 2023. The 246 concluded probes have directly led to 11 enforcement actions, including significant fines and remediation directives, demonstrating that the NDPC is prepared to impose substantial penalties on violators, from major corporations to financial institutions.
High-profile cases underscore the Commission’s resolve are: In July 2025, MultiChoice Nigeria was slapped with a N766.2 million fine for intrusive, unfair, and disproportionate data practices, including unlawful cross-border transfers of subscriber personal information without adequate safeguards or consent.
Read also: Certifying privacy, saving the naira: Inside NDPC’s bold data protection year
Fidelity Bank faced a N555.8 million penalty in 2024 (with ongoing implications noted in recent reviews) for processing personal data without informed consent, non-transparent use of cookies in banking apps, and engaging non-compliant third-party processors.
These landmark sanctions, among others, have contributed to the N5.2 billion compliance revenue stream, bolstering government coffers while deterring widespread non-compliance.
The broader data protection ecosystem now exceeds N16.2 billion in value and has created more than 23,000 jobs, signaling robust economic ripple effects from strong regulatory enforcement.
Olatunji tied these achievements to national digital ambitions, stating that trust built through accountability is essential for Nigeria’s push toward a $1 trillion digital economy.
“Enforcement is the backbone of privacy protection. By concluding 246 investigations and applying meaningful consequences, we are not only protecting citizens but also creating the secure environment needed for innovation, foreign investment, and sustainable growth,” he emphasized.
Supporting this enforcement momentum are expanded compliance efforts: 38,677 Data Controllers and Processors of Major Importance registered, 307 licensed Data Protection Compliance Organisations, and over 8,155 Compliance Audit Returns filed.
The Commission has also issued the General Application and Implementation Directive (effective September 2025), translated the Act into three major languages, and launched a multi-sector drive in August 2025, sending compliance notices to 1,348 entities in banking, insurance, pension, and gaming, with further actions promised for defaulters.
Looking to 2026, the NDPC plans to ramp up enforcement against non-compliant organizations while advancing awareness, professional certification via the National DPO program, and guidance on best practices.
With international accolades like the Picasso Award for Best DPA in Africa and active participation in global forums, Nigeria’s data regime is increasingly viewed as credible and robust.
As emerging technologies accelerate data flows, the NDPC’s track record: 246 resolved cases, billions in revenue, and decisive fines, sends an unequivocal message. In digital Nigeria, privacy violations face ironclad consequences, and compliance is the only viable path forward.
Activities during National Privacy Week (January 28–February 4) will build on this foundation through nationwide campaigns and stakeholder engagements to embed a culture of ethical data stewardship.
Join BusinessDay whatsapp Channel, to stay up to date
Open In Whatsapp
