NDPC Boss, Olatunji Calls for Integrated Strategy on Data Privacy, Cyber-Security
Dr Vincent Olatunji, national commissioner, Nigerian Data Protection Commission (NDPC), has declared that data privacy, protection, and cybersecurity are “inseparable pillars of the digital age” and must be prioritized in Nigeria’s digital transformation journey.
Dr. Olatunji made this assertion during his keynote address titled “Data Privacy and Protection: Nigeria’s Roadmap to Compliance” at the ongoing National Cybersecurity Conference in Abuja.
He highlighted that while data protection focuses on safeguarding personal information from misuse, cybersecurity protects the systems that store this data.
“Data privacy is a basic human right that empowers individuals to control how their personal information is collected, used, and shared.
“Strong cybersecurity is essential to maintain the confidentiality, integrity, and availability of personal data. Conversely, robust data protection frameworks help guide effective cybersecurity practices and foster a culture of privacy,” he said.
Commenting on Nigeria’s progress, Dr. Olatunji noted the country’s recent Tier 3 (“establishing”) ranking in the 2024 Global Cybersecurity Index and its top position in Africa particularly in the area of data protection. He traced the evolution of Nigeria’s data protection journey, culminating in the signing of the Nigeria Data Protection Act (NDP Act) 2023 by President Bola Ahmed Tinubu (GCFR).
He described the NDP Act as the cornerstone of the country’s data governance framework, adding “The Act regulates the processing of personal data in Nigeria and guarantees the privacy rights of individuals.”
According to him, it applies to both local and international data controllers and processors handling data of Nigerian subjects and provides clear guidelines on data collection, storage, consent, data subject rights, and penalties for non-compliance.
He cited the recent ₦766.2 million fine imposed on MultiChoice for non-compliance as an example of the Commission’s enforcement capacity.
Dr. Olatunji also revealed that the NDPC has generated over ₦2 billion in the last two years, with the data protection sector now valued at ₦16.2 billion alongside the creation of numerous job opportunities.
He further emphasized ecosystem growth, citing the certification of 455 Data Protection Officers (DPOs) under the National Certification Program and verification of 3,343 Data Protection Compliance Organizations (DPCOs) by 2025.
While celebrating progress, Dr. Olatunji also mentioned key areas for improvement, including building institutional capacity, enhancing data literacy and workforce development, and strengthening collaboration across sectors.
The NDPC boss urged stakeholders to “embrace a culture of data protection, implement robust cybersecurity practices, and stay attuned to the evolving regulatory landscape” in order to reduce risks, protect assets, and support long-term national growth.