The Nigeria Data Protection Commission (NDPC) has disclosed that Nigeria’s data privacy ecosystem has grown into a multi-billion-naira industry, generating more than ₦16.2 billion in value within two years, contributing over ₦5.2 billion to federal revenue and creating an estimated 23,000 jobs nationwide.
National Commissioner and Chief Executive Officer of the NDPC, Dr Vincent Olatunji, revealed this during a media workshop and capacity-building engagement held in Lagos, where he outlined the Commission’s enforcement milestones and expanding economic impact.
Olatunji noted that although the NDPC was not established primarily as a revenue-generating agency, compliance-related inflows into government coffers have been substantial.
According to him, the ₦5.2 billion accrued to the Federal Government was realised through regulatory compliance fees and sanctions imposed under the Nigeria Data Protection Act (NDPA), 2023, outcomes he said, reflect a decisive shift toward enforcement-led regulation, with the Commission concluding 246 investigations into data protection and privacy breaches across sectors.
“These investigations have resulted in 11 major enforcement actions, including significant financial penalties and corrective directives. The message is clear: violations of data privacy will attract serious consequences, regardless of the size or status of the organisation involved,” he stated.
Digital TimesNG recalls that among the most prominent cases cited was the July 2025 sanction against MultiChoice Nigeria, which attracted a ₦766.2 million fine for intrusive and disproportionate data practices, including unlawful cross-border transfer of subscribers’ personal information without adequate safeguards.
Fidelity Bank was also penalised ₦555.8 million in 2024 for processing personal data without informed consent, deploying non-transparent cookies on its digital platforms and engaging non-compliant third-party processors.
The NDPC said such landmark penalties have strengthened regulatory credibility, deterred widespread non-compliance and reinforced trust in Nigeria’s digital environment, adding that the wider ecosystem, comprising compliance firms, data officers, auditors and technology providers, has now surpassed ₦16.2 billion in estimated value, with strong spillover effects on employment and skills development.
He linked these achievements to Nigeria’s broader digital aspirations, stressing that accountability and trust are indispensable to the country’s ambition of building a $1 trillion digital economy.
“Privacy enforcement is the foundation of digital confidence. By holding violators accountable, we are safeguarding citizens while creating the secure environment required for innovation, investment and sustainable growth,” he said.
Supporting this enforcement drive are expanded compliance structures across the economy. The Commission has registered 38,677 Data Controllers and Processors of Major Importance, licensed 307 Data Protection Compliance Organisations and received more than 8,155 Compliance Audit Returns.
It has also issued the General Application and Implementation Directive, effective from September 2025, translated the NDPA into three major Nigerian languages and launched a multi-sector compliance sweep covering banking, insurance, pensions and gaming, with 1,348 entities already served notices.
The NDPC Chief explained that Nigeria’s data protection journey began in 2019 with the Nigeria Data Protection Regulation, which later evolved into the NDPC and the NDPA framework. Since then, the Commission has prioritised awareness, institutional capacity and cross-sector collaboration, positioning Nigeria as a leading voice in privacy governance on the continent.
He highlighted the country’s active participation in the Network of African Data Protection Authorities (NARPA) and confirmed that in December 2025, the NDPC received the Picasso Award for Africa’s most outstanding data protection authority, a recognition he said reflects Nigeria’s growing stature in the global privacy ecosystem.
Responding to questions from journalists, Olatunji reaffirmed the Commission’s commitment to protecting the rights of data subjects, including the right to correct personal information on public platforms, and urged Nigerians to report suspected breaches for prompt regulatory action.
On cross-border data transfers and international agreements, he assured that the NDPC would continue to scrutinise such arrangements to protect national interests and ensure strict compliance with existing laws.
Looking ahead, the Commission said its priorities include intensifying public awareness, strengthening enforcement under the NDPA, offering clearer guidance on best practices, and expanding professional certification through the National Data Protection Officer programme to align Nigeria with global standards.
With emerging technologies accelerating the flow of personal data, the NDPC said its enforcement record, marked by resolved investigations, substantial compliance revenue and decisive sanctions, underscores a firm regulatory stance.