Nigeria Data Protection Commission Launches Probe into Non-Compliant Organizations

Strategic Insights -

The Nigeria Data Protection Commission (NDPC) has initiated a probe into banks, insurance companies, pension companies, gaming companies, and insurance brokers that allegedly flout the Nigeria Data Protection Act (NDP Act), 2023. The organizations under investigation have been required to provide evidence of compliance with the Act within 21 days. This move aims to safeguard the fundamental rights and freedoms of data subjects, strengthen the digital economy, and ensure Nigeria's participation in regional and global economies.

Key Takeaways:

  • The NDPC has launched a probe into 21 organizations in the banking, insurance, pension, gaming, and insurance broking sectors for non-compliance with the Nigeria Data Protection Act (NDP Act), 2023.
  • The organizations under investigation have been required to provide evidence of filing NDP Act Compliance Audit Returns for 2024, designation or appointment of a Data Protection Officer, and technical and organizational measures for data protection within the organization.
  • The NDPC has issued Compliance Notices to the organizations, which may lead to enforcement actions, including administrative fines and/or criminal prosecution, if non-compliance persists.
  • The investigation aims to promote accountability and trust in Nigeria's data protection and privacy ecosystem, ensure data subjects' rights, and strengthen the digital economy.
  • The NDPC has reiterates that failure to comply with the Compliance Notice may result in severe consequences, including enforcement actions.

Statistics:

  • 21 organizations are under investigation for non-compliance with the Nigeria Data Protection Act (NDP Act), 2023.
  • The deadline for the organizations to provide evidence of compliance is within 21 days of receiving the Compliance Notice.
  • The NDPC has issued Compliance Notices to organizations in the banking, insurance, pension, gaming, and insurance broking sectors.
  • The investigation is focused on ensuring compliance with Sections 5(i), 6(a), 6(c), 46(3), and 47(1)-(2) of the NDP Act, 2023.

Sources:

  • A statement issued by the Nigeria Data Protection Commission (NDPC) and signed by Babatunde Bamigboye, Head of Legal, Enforcement and Regulations (No date provided)
  • Daily Trust report (No date provided)