By Martin Ekpeke
The National Commissioner of the Nigeria Data Protection Commission (NDPC), Dr. Vincent Olatunji, has revealed that Nigeria’s data protection ecosystem has rapidly expanded to a valuation of ₦16.2 billion.
Speaking at a capacity-building for journalists and a press conference in Lagos, Dr. Olatunji further disclosed that the commission has generated over ₦5.2 billion in compliance revenue since its establishment, signaling a major shift in how Nigerian entities handle personal information.
Dr. Olatunji attributed this growth to the commission’s Strategic Roadmap and Action Plan (NDP-SRAP), which aligns with the President’s eight priorities and the Federal Ministry of Communications, Innovation, and Digital Economy’s five pillars.
“Our activities are guided by a commitment to building a robust digital economy where trust and innovation coexist,” Olatunji stated.
The Commissioner highlighted several key milestones achieved under the Nigeria Data Protection Act (NDP Act) 2023, including the registration of 38,677 Data Controllers and Processors of Major Importance (DCPMIs).
The commission has also concluded 246 investigations into data breaches, which resulted in 11 significant enforcement actions, such as heavy fines and remediation directives. Additionally, there are now 307 licensed Data Protection Compliance Organisations (DPCOs) operating in Nigeria, with over 8,155 compliance audit returns filed to date.
Dr. Olatunji also noted the issuance of the General Application and Implementation Directive (GAID) on March 20, 2025, which became fully effective on September 19, 2025, providing a clearer framework for organizations to navigate their legal obligations.
Beyond revenue, the ecosystem has become a significant engine for employment, creating over 23,000 jobs for Nigerians. This surge in local expertise was bolstered by the launch of the maiden National DPO Certification Exam, where 494 candidates out of 500 were successfully certified.
Nigeria’s standing as a safe destination for Foreign Direct Investment (FDI) has also improved. “The presence of an independent data protection authority is a critical requirement for international business confidence. This global credibility earned Nigeria the Picasso Award for the Best Data Protection Authority in Africa and led to Nigeria hosting over 20 authorities for the 8th NADPA meeting in May 2025,” Olatunji explained.
Meanwhile, the 2026 National Privacy Week, themed “Privacy in the Age of Emerging Technologies: Trust, Ethics, and Innovation,” runs from January 28 to February 4.
Dr. Olatunji emphasized that the year ahead will see a more aggressive stance on non-compliance. “In 2026, we will intensify the enforcement of the provisions of the Nigeria Data Protection Act and take appropriate actions against non-compliant organizations,” he warned.
The commission also plans to expand its Youth Data Protection Awareness Program, which aims to empower 5,000 youths with digital literacy, and further integrate its Virtual Privacy Academy to meet global standards.