The Nigeria Data Protection Commission has commenced a sector-by-sector investigation of organisations suspected of violating provisions of the Nigeria Data Protection Act 2023.
Babatunde Bamigboye, NDPC’s head of legal, enforcement, and regulations, said this in a statement on Monday.
Mr Bamigboye explained that the investigation was in line with the NDPC’s mandate to safeguard the rights, freedoms, and interests of data subjects as guaranteed under the 1999 Constitution.
He also explained that the act aimed to strengthen the legal foundations of Nigeria’s digital economy, while ensuring the nation’s trusted and beneficial participation in regional and global economies through the responsible use of personal data.
Mr Bamigboye said that the organisations to be investigated were drawn from insurance companies, pension companies, gaming companies, banks, and insurance brokers.
According to him, in line with some sections of the NDPA, the commission has issued compliance notices to certain organisations listed in the schedule of its notice.
”The list of these organisations will be published today in some major newspapers across the country.
”These organisations are required to, within 21 days of issuance, provide evidence of filing NDP Act Compliance Audit Returns for 2024 and evidence of designation or appointment of a Data Protection Officer, including name and contact details.
”They are also to provide a summary of technical and organisational measures for data protection within the organisation and evidence of registration as a data controller or processor of major importance,” Mr Bamigboye said.
Mr Bamigboye warned the organisations to comply, adding that failure could result in enforcement orders, administrative fines, or criminal prosecution in line with the NDPA.
”The NDPC remains committed to ensuring a culture of accountability and trust in Nigeria’s data protection and privacy ecosystem while safeguarding the rights of data subjects and strengthening the nation’s digital economy,” he said.
(NAN)
