NIGERIA DATA PROTECTION COMMISSION
- Founded
- 2022-01-01 in Abuja, Nigeria
- Headquarters
- No. 12 Clement Isong Street, Asokoro, Abuja, Nigeria
The Nigeria Data Protection Commission (NDPC) is the statutory federal body responsible for regulating data privacy and enforcing the Nigeria Data Protection Act, 2023. Established in February 2022 as the Nigeria Data Protection Bureau (NDPB), it was later elevated to a full commission to provide a robust legal framework for the protection of personal data in Nigeria. The NDPC is headquartered in Abuja and operates under the leadership of a National Commissioner/CEO. The Commission’s core mandate includes overseeing compliance with data protection standards, licensing Data Protection Compliance Organisations (DPCOs), conducting investigations into data breaches, and promoting public awareness of privacy rights. It also issues guidelines, codes of conduct, and audit frameworks for data controllers and processors across both public and private sectors. In recent years, the NDPC has entered into strategic partnerships with organisations such as the National Bureau of Statistics, the Nigeria Governors’ Forum, and Meta to strengthen data governance and digital trust. The NDPC’s establishment marks a significant step in Nigeria’s digital transformation, aligning the country with global data protection norms such as the GDPR. It plays a pivotal role in fostering a secure digital economy, attracting foreign investment, and protecting the privacy rights of over 200 million citizens.
Detailed Review
The Nigeria Data Protection Commission evolved from the Nigeria Data Protection Bureau (NDPB), which was created in February 2022 to oversee the implementation of the Nigeria Data Protection Regulation (NDPR) originally issued by the National Information Technology Development Agency (NITDA). Following the enactment of the Nigeria Data Protection Act in June 2023, the bureau was formally upgraded to a commission with expanded statutory powers. The NDPC now has the authority to enforce the Act, impose penalties for non-compliance, and issue binding regulations.
Regulation & Enforcement
Monitoring and ensuring adherence to the NDP Act across all sectors. The Commission has the power to investigate reported data breaches and privacy violations, such as the March 2024 investigation into the National Identity Management Commission (NIMC).
Licensing of DPCOs
Accrediting organisations that provide data protection training, auditing, and consultancy services. This creates a regulated ecosystem for data protection compliance.
Public Awareness
Running campaigns like the Digital Privacy Awareness Campaign (DPAC) and the “7-Day Data Privacy Challenge” to educate citizens about their privacy rights.
International Collaboration
Partnering with global bodies and tech giants, including a joint programme with Meta announced in June 2026 to harmonise data protection standards and strengthen digital trust.
The NDPC has also introduced the NDPC Audit Compliance Trust Mark, awarded to organisations that successfully complete data protection audits, and has signed multiple Memoranda of Understanding with government agencies and professional institutes to embed data governance into public administration. Despite its relatively short history, the NDPC has positioned itself as a key player in Africa’s data protection landscape. Its proactive approach includes issuing codes of conduct for DPCOs, engaging with state governments via the Nigeria Governors’ Forum, and participating in international summits such as GITEX Nigeria. However, resource constraints and the challenge of enforcing compliance across a vast informal economy remain areas for ongoing improvement.
Key Products
Nigeria Data Protection Act (2023) – Enforcement & Regulations
The primary legal instrument governing data privacy in Nigeria. The NDPC ensures compliance through audits, investigations, and penalties.
Data Protection Compliance Organisation (DPCO) Licensing
The Commission licenses and oversees DPCOs – entities authorised to provide training, auditing, and consultancy to data controllers and processors.
NDPC Audit Compliance Trust Mark
A certification awarded to organisations that meet strict data protection audit standards, signalling trustworthiness to consumers and partners.
Digital Privacy Awareness Campaign (DPAC)
An ongoing public education initiative aimed at raising awareness of privacy rights among citizens and businesses.
Meta-Supported Initiative for Data Protection (2026)
A joint programme with Meta to strengthen data protection capabilities in Nigeria, announced in June 2026.
Key Persons
- Alexander Onwe, Esq. CDPO
Speaker
- Dr. Vincent Olatunji
National Commissioner / Chief Executive Officer (CEO)