The Nigeria Data Protection Commission (NDPC) has commenced a sector-by-sector investigation of organisations suspected of violating provisions of the Nigeria Data Protection Act (NDPA) 2023.
Mr Babatunde Bamigboye, Head, Legal, Enforcement and Regulations of the commission said this in a statement on Monday in Abuja.
Bamigboye explained that the investigation was in line with the NDPC’s mandate to safeguard the rights, freedoms and interests of data subjects as guaranteed under the 1999 Constitution.
He also explained that the act was to strengthen the legal foundations of Nigeria’s digital economy while ensuring the nation’s trusted and beneficial participation in regional and global economies through responsible use of personal data.
Bamigboye said that the organisations to be investigated were drawn from insurance companies, pension companies, gaming companies, banks and insurance brokers.
According to him, in line with some sections of the NDPA, the commission has issued compliance notices to certain organisations listed in the schedule of its notice.
”The list of these organisations will be published today in some major newspapers across the country.
”These organisations are required to within 21 days of issuance provide evidence of filing NDP Act Compliance Audit Returns for 2024, evidence of designation or appointment of a Data Protection Officer, including name and contact details.
”They are also to provide summary of technical and organisational measures for data protection within the organisation and evidence of registration as a data controller or processor of major importance.”
Bamigboye warned the organisations to comply, adding that failure could attract enforcement orders, administrative fines or criminal prosecution in line with the NDPA.
”The NDPC remains committed to ensuring a culture of accountability and trust in Nigeria’s data protection and privacy ecosystem while safeguarding the rights of data subjects and strengthening the nation’s digital economy,” he said.
