Data Breach: NDPC Targets Banks, Telecos With Heavy Fines

The Nigeria Data Protection Commission (NDPC) has said it would go after industries that breach data policies endangering citizens’ privacy.

The National Commissioner and Chief Executive Officer of NDPC, Dr. Vincent Olatunji, said the enforcement was in line with the mandate of the commission to ensure security of citizens.

In a statement released by the Commission’s Media Department, Dr. Olatunji warned data controllers and processors to prioritize the safety and integrity of the data entrusted to them, highlighting the Commission’s zero tolerance for breaches.

NDPC would focus on sectors such as banking, healthcare, education, insurance, telecommunications, and government agencies responsible for safeguarding citizens’ data.

“For data controllers and processors, there is going to be massive enforcement. We have never really issued any fine, but going forward, you’ll hear us giving heavy penalties,” Olatunji said.

He assured Nigerians that their data rights, as guaranteed by the NDPA Act, would be fully protected, and defaulting data controllers and processors would face strict consequences.

He highlighted that efforts of the commission have resulted in the signing of Memorandums of Understanding (MOUs) with key organizations, including the National Insurance Commission (NAICOM), the National Lottery Regulatory Commission (NLRC), the Data Privacy Office of Canada, and the Dubai International Financial Centre Authority (DIFC), among others.

Olatunji said the NDPC would advance to the second phase of its Strategic Roadmap and Action Plan (NDP-SRAP 2023-2027) in 2025.

According to him, the phase is expected to create job opportunities within Nigeria’s data protection and privacy ecosystem, particularly for young people.

“There are a lot of data controllers and processors that are looking for people to work with them. Now those that we have trained in 2024, those we have certified, we are going to do more this year to actually launch them to the job market where they can really work with data controllers and processors,” he stated.

The NDPC boss further disclosed that the commission would embark on awareness creation to educate citizens on their rights.

“The Commission aimed to educate citizens about their rights and the importance of data privacy while reminding data controllers and processors of their obligations under the NDP Act,” he added.