…As NDPC tightens grip on data protection

The Nigeria Data Protection Commission (NDPC) has launched a new initiative backed by Meta Platforms aimed at strengthening data privacy awareness, regulatory capacity and protection of citizens’ personal information, marking a significant step in the country’s efforts to build a stronger digital trust ecosystem.

The initiative, known as the Meta-Supported Initiatives for Data Protection (M-SIDP), emerged from a regulatory process involving Meta’s data processing practices in Nigeria.

The matter was resolved in 2025 through a court-approved settlement, under which the social media giant agreed to support a two-year programme focused on advancing data protection measures across the country.

Read also: 10m trips later, Shuttlers bets on digital transit to solve urban commute crisis

The programme comes at a time when Nigeria is experiencing rapid digital growth, with millions of citizens increasingly relying on online platforms, digital financial services and social media. As more personal information is collected and processed online, concerns over privacy, data misuse and digital security have become more prominent.

According to the NDPC, the M-SIDP initiative is designed to strengthen safeguards for data subjects and support the implementation of the Nigeria Data Protection Act (NDP Act) 2023, the General Application and Implementation Directive (GAID), and the Commission’s Strategic Roadmap and Action Plan (SRAP) 2023–2027.

The programme will focus on four key areas: governance, research and development; safety and sustainability mechanisms for the technology ecosystem; capacity building for Data Protection Officers (DPOs) and Data Protection Compliance Organisations (DPCOs); and public awareness campaigns targeted at citizens, particularly vulnerable groups.

The initiative represents a shift from enforcement alone toward ecosystem development. Rather than ending with penalties or compliance directives, the settlement has been structured to generate broader benefits for Nigeria’s growing digital economy.

The capacity development component is expected to strengthen the skills of professionals responsible for implementing privacy frameworks in organisations. This could improve compliance standards across sectors such as banking, telecommunications, healthcare, e-commerce and government services, where large volumes of personal data are processed daily.

The public awareness pillar may also help address one of the biggest challenges facing data protection in Nigeria: low citizen awareness of privacy rights. Many internet users remain unaware of how their personal information is collected, stored, shared or monetised by digital platforms and businesses.

Analysts believe greater awareness could encourage citizens to demand stronger accountability from organisations handling their data, thereby improving overall compliance with privacy regulations.

The NDPC stressed that the settlement does not limit its statutory powers or affect its independence as a regulator. The Commission said it would continue to exercise its mandate over all data processing activities in Nigeria in accordance with the law.

That clarification is seen as important because it signals that while Meta is supporting the programme, the company remains subject to the same regulatory oversight as other organisations operating in Nigeria.

The launch of the initiative also reflects the growing maturity of Nigeria’s data protection framework. Since the enactment of the Data Protection Act in 2023, regulators have intensified efforts to establish privacy standards that align with global best practices while addressing local realities.

Read also: After $75bn telecom boom, Nigeria must focus on digital transformation — Aboki

For Nigeria’s digital economy, the success of the programme could extend beyond privacy compliance. Experts note that stronger data protection frameworks are increasingly becoming a prerequisite for attracting investment, supporting digital trade and building trust in online services.

As businesses expand their digital operations and artificial intelligence technologies become more prevalent, the ability to protect personal data is expected to play a crucial role in shaping consumer confidence and the future growth of the country’s technology sector.

The NDPC said it would provide periodic updates on the implementation of the M-SIDP programme and called on stakeholders across government, industry and civil society to support efforts aimed at creating a secure, accountable and sustainable privacy ecosystem in Nigeria.

More from our Technology Column

Royal Ibeh is a senior journalist with years of experience reporting on Nigeria’s technology and health sectors. She currently covers the Technology and Health beats for BusinessDay newspaper, where she writes in-depth stories on digital innovation, telecom infrastructure, healthcare systems, and public health policies.

Join BusinessDay whatsapp Channel, to stay up to date

Open In Whatsapp