Nigeria Data Protection Act Enforcement: NDPC Targets Banks, Insurers, and Tech Firms with 21-Day Compliance Deadline
The Nigeria Data Protection Commission (NDPC) has launched an aggressive enforcement drive targeting financial institutions and tech firms over compliance with the Nigeria Data Protection Act, 2023. The move signals tougher regulations for sectors handling sensitive personal data as the government seeks to bolster digital trust and economic growth.
Over the weekend, NDPC served a 21-day compliance notice to banks, insurance companies, pension operators, gaming platforms, and brokers suspected of violating data privacy laws. These companies, scheduled for public disclosure in national newspapers on August 25, 2025, must submit proof of compliance, including 2024 audit returns, appointment of Data Protection Officers, and implementation of robust data security measures.
Organizations failing to meet the deadline face steep sanctions, including fines, enforcement orders, and potential criminal prosecution. This directive follows recent penalties against major firms, including Multichoice Nigeria, fined N766.2 million for unauthorized cross-border data transfers, and Fidelity Bank, which incurred a N555.8 million penalty for data breaches.
According to Babatunde Bamigboye, NDPC’s Head of Legal, Enforcement, and Regulations, the sector-by-sector audit aims to entrench accountability and protect citizens’ data rights. “The NDPC is committed to fostering trust and safeguarding fundamental rights as guaranteed by the Constitution,” the commission said, emphasizing that strict data governance is vital for Nigeria’s integration into global digital markets.
With the compliance clock ticking, financial institutions and tech-driven gaming operators must prioritize data governance or risk financial and reputational damage. Banks, which manage massive customer datasets, and gaming platforms, collecting sensitive user information, are under pressure to adopt rigorous security frameworks. “This is about building a culture of accountability. Nigeria’s digital future depends on it,” Bamigboye added.
Source: Business day