Expect Heavy Penalties for Data Breaches, NDPC Warns Organisations

Kehinde Fajobi

The Nigeria Data Protection Commission (NDPC) has issued a strong warning to organisations mishandling citizens’ data, pledging strict enforcement of penalties against violators in 2025.

Speaking on Friday, the National Commissioner and CEO of the NDPC, Dr Vincent Olatunji, stated that the Commission is intensifying efforts to protect data rights, with a focus on sectors like banking, healthcare, education, insurance, telecommunications, and government agencies.

“For data controllers and processors, there is going to be massive enforcement. We have never really issued any fine, but going forward, you’ll hear us giving heavy penalties,” Olatunji declared in a statement released by the Commission’s Media Department.

He assured Nigerians that their data rights, enshrined in the NDPA Act, will be upheld, and violators will face severe consequences.

He added that data controllers and processors must prioritise the integrity of the data entrusted to them.

The NDPC has been engaging with stakeholders across public and private sectors to promote compliance, signing agreements with key organisations like the National Insurance Commission (NAICOM), National Lottery Regulatory Commission (NLRC), and international bodies such as the Data Privacy Office of Canada and the Dubai International Financial Centre Authority.

Dr Olatunji revealed that the Commission will advance its Strategic Roadmap and Action Plan (NDP-SRAP 2023–2027) in 2025, creating jobs within Nigeria’s data protection ecosystem.

“Those we trained and certified in 2024 will be introduced to the job market where they can work with data controllers and processors,” he said.

The NDPC has also been organising training programmes to develop a pool of globally competitive experts, aiming to embed a culture of data protection and privacy in Nigeria.

In May 2025, Nigeria will host the “Network of African Data Protection Authorities Conference,” welcoming over 40 nations with existing data protection laws. Dr Olatunji said this event would position Nigeria as a leader in the data protection sector while delivering economic benefits to the country.

The NDPC vowed to continue raising awareness of data protection rights and emphasised its commitment to ensuring that all citizens and organisations respect the principles of data privacy.