NDPC investigates TikTok, Truecaller for alleged data breaches 

The National Commissioner and Chief Executive Officer of the NDPC, Dr. Vincent Olatunji, disclosed this at a press conference in Abuja on Thursday, stating that the commission was scrutinising their compliance with data protection laws.

“As we speak, we have even gone to the extent of investigating multinationals. We are currently investigating TikTok and Truecaller in the area of data privacy,” he said.

He added that depending on the findings, if the companies could go through remediation and correct their lapses, the NDPC would be open to working with them.

Olatunji noted that when the commission began monitoring compliance, only four per cent of organisations adhered to data protection regulations. However, due to increased enforcement and engagement with stakeholders, compliance levels have now improved to over 55 per cent.

At the press conference, the NDPC also unveiled the Nigeria Data Protection Act – General Application and Implementation Directive (NDP Act-GAID), which provides comprehensive guidelines to help data controllers and processors comply with the law.

He announced that the full implementation of the directive would commence in September 2025, with a six-month transition period for organisations. All provisions relating to fees will take effect from January 2026.

The NDPC assured that it would continue to provide guidance notices and advisories to clarify legal requirements while rolling out capacity-building programmes to deepen the culture of data privacy and protection in Nigeria.