In a press conference held on Monday, Dr. Vincent O. Olatunji, the National Commissioner/CEO of the Nigeria Data Protection Commission (NDPC), addressed the media to announce the implementation of the Nigeria Data Protection Act (NDPA) 2023.
This landmark legislation represents a significant milestone in the country’s journey toward data privacy and protection.
Dr. Olatunji emphasized that having the NDPA in place is just the beginning of a comprehensive effort to establish a sustainable digital economy.
He highlighted the government’s commitment, spearheaded by His Excellency, President Bola Ahmed Tinubu, to create one million jobs through the digital economy sector.
As part of this initiative, measures will be taken to generate 500,000 jobs within the data protection ecosystem, constituting 50% of the sector’s job creation target.
The NDPA places great importance on respecting the personal data of Nigerian citizens, safeguarding their privacy, and upholding digital rights.
Dr. Olatunji emphasized that this respect is now firmly embedded in the NDPA, signaling a transformative step towards cultivating a culture where the protection of personal data is not only valued but also an inviolable obligation.
The implementation of data protection as a statutory requirement means that every organization, regardless of size, must cooperate with the government and demonstrate compliance.
Dr. Olatunji urged organizations to perceive this development as an exciting journey toward building trust, establishing robust data protection structures, and fortifying Nigeria’s position in the global digital economy landscape.
To ensure nationwide compliance, the NDPC has outlined key initiatives and future developments. In the coming months, the following targets will be pursued:
- Public Awareness Campaigns: The NDPC recognizes that awareness is the first step toward compliance. Therefore, they will expand active public awareness campaigns to educate organizations and individuals about their roles, rights, and responsibilities under the NDPA.
Development of Implementation Framework: Standardization is crucial, and a standardized framework for implementation will be developed to ensure consistency and clarity across all sectors. This framework will include guidance notices on key provisions of the law, such as lawful basis of data processing, data subjects’ rights, compliance audit returns, and cross-border data transfer.
Capacity-building for Data Protection Officers (DPOs): DPOs play a vital role in ensuring compliance. The NDPC will enhance capacity-building opportunities for DPOs enrolled under the National Data Protection Adequacy Programme (NaDAP), equipping them with the skills necessary to lead their organizations toward compliance.
Issuance of DPCO Practice Guidelines and Sectorial Guidance Notices: Regulatory frameworks for Data Protection Compliance Organizations (DPCOs) will be strengthened, and sector-specific guidelines, particularly for the financial and telecom sectors, will be issued.
These frameworks aim to address specific vulnerabilities, risks, and opportunities while providing a clear path to compliance. More DPCOs will be licensed to provide compliance services, fostering a competitive ecosystem.
Upscale of Registration Process: Simplifying compliance pathways and encouraging participation, the registration process for data controllers and data processors will be streamlined in the digital age.- Compliance Audit Filing Calendar: A defined calendar for filing annual Compliance Audit Returns will be introduced, with a target of January to December. Organizations will have the first quarter of each year to file their returns.
- Compliance under the NDPR will be reviewed, and only compliant organizations will be eligible for inclusion on the NaDPAP Whitelist. This approach aims to ensure organizations remain up-to-date with their compliance obligations.
Dr. Olatunji concluded his address by emphasizing that these initiatives demonstrate the NDPC’s commitment to ensuring that all Nigerian organizations
