The National Commissioner and Chief Executive Officer of the Nigerian Data Protection Commission (NDPC), Dr. Vincent Olatunji has emphatically stated that data privacy, data protection, and cybersecurity are not merely components but “inseparable pillars of the digital age.” Speaking on Nigeria’s ongoing digital transformation journey, Dr. Olatunji stressed that the critical imperative for these three elements to be prioritized as fundamental to the nation’s progress and security in the increasingly interconnected global landscape.
Dr. Olatunji made this assertion during his keynote address titled “Data Privacy and Protection: Nigeria’s Roadmap to Compliance” at the ongoing National Cybersecurity Conference in Abuja.
He underscored that while data protection focuses on safeguarding personal information from misuse, cybersecurity protects the systems that store this data. “Data privacy is a basic human right that empowers individuals to control how their personal information is collected, used, and shared,” he said.
“Strong cybersecurity is essential to maintain the confidentiality, integrity, and availability of personal data. Conversely, robust data protection frameworks help guide effective cybersecurity practices and foster a culture of privacy.”
Also Read: Nigeria’s Data Privacy Ecosystem Generates Over $10 Million, 23000 Jobs in 3 Years
Highlighting Nigeria’s progress, Dr. Olatunji noted the country’s recent Tier 3 (“establishing”) ranking in the 2024 Global Cybersecurity Index and its top position in Africa particularly in the area of data protection. He traced the evolution of Nigeria’s data protection journey, culminating in the signing of the Nigeria Data Protection Act (NDP Act) 2023 by President Bola Ahmed Tinubu (GCFR).
He described the NDP Act as the cornerstone of the country’s data governance framework. “The Act regulates the processing of personal data in Nigeria and guarantees the privacy rights of individuals,” he explained.
It applies to both local and international data controllers and processors handling data of Nigerian subjects and provides clear guidelines on data collection, storage, consent, data subject rights, and penalties for non-compliance.
Dr. Olatunji cited the recent ₦766.2 million fine imposed on MultiChoice for non-compliance as an example of the Commission’s enforcement capacity. He also revealed that the NDPC has generated over ₦2 billion in the last two years, with the data protection sector now valued at ₦16.2 billion alongside the creation of numerous job opportunities.
He further highlighted ecosystem growth, citing the certification of 455 Data Protection Officers (DPOs) under the National Certification Program and verification of 3,343 Data Protection Compliance Organizations (DPCOs) by 2025.
While celebrating progress, Dr. Olatunji also pointed to key areas for improvement, including building institutional capacity, enhancing data literacy and workforce development, and strengthening collaboration across sectors.
He further urged stakeholders to “embrace a culture of data protection, implement robust cybersecurity practices, and stay attuned to the evolving regulatory landscape” in order to reduce risks, protect assets, and support long-term national growth
