Data protection and privacy: Eight African countries understudy Nigeria ecosystem 

The immediate action taken by President Bola Tinubu in 2023 provided a bolster for Nigeria data protection and privacy ecosystem, The Nation gathered in Abuja on Monday. 

According to the authorities of the Nigeria Data Protection Commission (NDPC), the president acted in manners that demonstrated that he had seen the future of the sector as promising and bright. 

The NDPC in a statement said President Tinubu signed the 2023 Data Protection Act into law thus paving the way for opportunities, expansion of the ecosystem, and ensured that regulatory and supervisory functions take the front stage. 

The Chief Executive Officer in charge of the Nigeria Data Protection Commission, Dr Vincent Olatunji also set the ball rolling for policy implementation, and compliance with provisions of the NDPC Act.

The CEO/National Commissioner of the NDPC, according to our findings left no one in doubt that the data protection and privacy policy of Nigeria would lead and provide guidance for other agencies in Africa, and the West Africa sub region. 

Dr Olatunji who is also the pioneer CEO of the Commission ensured that the data protection and privacy ecosystem started to attract attention, investments and provided information and awareness on data privacy to data subjects and custodians of citizen’s data. Banks, educational institutions, hospitals, insurance companies, telecommunications companies and other industry players are kept on their toes. Some institutions were also sanctioned for data breaches. The online platforms were also sanitised on data protection and privacy. 

It was gathered that following the religious implementation of the Act and the robust regulatory oversights provided by the Commission, Nigeria became a centre of attraction for other countries.

It was learnt that within two years, no fewer than eight countries began to understudy Nigeria data protection and privacy ecosystem in order to replicate same methodology in their respective countries. 

Our Correspondent gathered that Nigeria ensured the Domestication of Data Protection Officers’ Certification to enhance competence within the ecosystem. This localisation also reduced pressure on the naira by limiting the need to purchase foreign currency for international certification. Over 500 Data Protection Officers received international 

Certification.

The NDPC certification significantly expanded Nigeria’s pool of qualified privacy professionals and supporting the effective implementation of the Nigeria Data Protection Act across sectors. Also within the period under review, Nigeria hosted the Network of African Data Protection Authorities, (NADPA) Conference and Annual General Meeting.

The conference helped significantly to promote continental cooperation, knowledge exchange, and alignment of data protection regulatory frameworks among African data regulators.

Throught the initiatives of Dr Olatunji, the Virtual Privacy Academy (VPA) was established. The VPA is currently helping to expand privacy education, creating awareness across all sectors and ensuring that data subjects are seen as critical stakeholders, and treated as such. 

Advertisement

 The VPA is a Nollywood-styled initiative tailored to deliver structured online training, awareness programmes, and professional development courses to build data protection capacity.

On the countries understudying the Nigeria ecosystem, the NDPC received delegations from eight African Countries. It was an opportunity for them to share regulatory experience, institutional frameworks, and practical lessons in establishing and operating an effective data protection authorities. 

The Somalian Data Protection Authority came on 23rd July 2025, Uganda Data Protection Authority on 5th August, 2025, Botswana, Kingdom of Eswatini, Mozambique , Sierrra Leone, Tanzania and The Gambia on 8th September 2025.

Concerning the implementation of the Nigeria Data Protection ACT (NDP Act ) 2023 General Application and Implementation Directive, the Commission issued the NDP-Act GAID to provide regulatory clarity, operational guidance, and enforceable standards for compliance with the Nigeria Data Protection Act.

Also the NDP Act was translated into three Local Languages to enhance public awareness, ensure inclusion of all and sundry within the ecosystem. 

“To deepen public awareness and inclusion, the Commission translated the Nigeria Data Protection Act into the three major local languages (Hausa, Igbo and Yoruba) to improve accessibility and understanding of data protection rights among Nigerians”, said Mr Itunu Dosekun, the Head of Corporate Communications and Media of the NDPC. 

Itunu said the Commission also conducted targeted capacity-building programmes for Ministries, Departments, and Agencies to enhance institutional compliance, data governance practices, and the responsible handling of citizens’ personal data.

He added that in recognition of sterling achievements of the present leadership of the NDPC, the Commission received multiple recognitions, including Outstanding Data Protection Authority of the Year at the Picasso Awards Africa, affirming its leadership, regulatory impact, and commitment to data protection excellence.

Also worthy of mention the NDPC signed various Memorandum of Understanding on Data and knowledge information privacy protection initiative, Master Card, Digital Africa Consult, and with Bauchi State Government in addition to ones signed with Smart comply Technologies Solutions Limited and ISACA. 

Itunu said the moves are aimed at expanding the operations of NDPC and providing regulatory guidance and enforcement where necessary across the ecosystem.