Nigeria’s data protection and privacy framework is gaining continental recognition, following strategic moves by President Bola Tinubu and the Nigeria Data Protection Commission (NDPC).

In 2023, President Tinubu signed the Nigeria Data Protection Act into law, laying the foundation for a robust regulatory ecosystem. The Act empowered the NDPC to oversee compliance, implement policy, and provide guidance to organizations handling personal data across sectors such as banking, healthcare, education, insurance, and telecommunications.

Dr Vincent Olatunji, CEO of NDPC, spearheaded policy implementation, raising awareness about data privacy and ensuring enforcement against breaches. Online platforms were also audited and aligned with regulatory standards.

The success of Nigeria’s framework has attracted attention from other African nations. Within two years, eight countries—including Somalia, Uganda, Botswana, Eswatini, Mozambique, Sierra Leone, Tanzania, and The Gambia—sent delegations to understudy Nigeria’s data protection model. The visits focused on sharing regulatory experiences, institutional frameworks, and operational best practices.

To strengthen local capacity, NDPC domesticated the Data Protection Officers’ Certification, training over 500 professionals locally, reducing reliance on foreign certification, and building a competent privacy workforce.

NDPC also launched the Virtual Privacy Academy (VPA), an online platform providing structured privacy education, awareness campaigns, and professional development courses. In addition, the Nigeria Data Protection Act was translated into Hausa, Igbo, and Yoruba to ensure public understanding and inclusion.

The NDPC hosted the Network of African Data Protection Authorities (NADPA) Conference, promoting continental collaboration, knowledge exchange, and alignment of regulatory frameworks.

Recognition of NDPC’s leadership includes awards such as Outstanding Data Protection Authority of the Year at the Picasso Awards Africa. The Commission has also signed MoUs with organizations like Mastercard, Digital Africa Consult, Bauchi State Government, Smart Comply Technologies, and ISACA to expand regulatory guidance and enforcement.

“Nigeria’s data protection ecosystem is now a model for Africa, combining strong regulation, local capacity building, and public awareness,” said Mr Itunu Dosekun, Head of Corporate Communications, NDPC.

Nigeria’s efforts highlight a growing trend of digital governance leadership in Africa, ensuring citizens’ data is protected while fostering investment and trust in digital services.