Nigeria’s data protection sector has rapidly scaled into a ₦16.3 billion industry after just three years of formal regulation, according to Dr. Vincent Olatunji, National Commissioner and CEO of the Nigeria Data Protection Commission (NDPC).
The milestone was shared during the Regional Data Governance Exchange in Nairobi, Kenya, by Olufemi Ibitayo, the NDPC’s Head of Finance Management and Control, who spoke on behalf of Dr. Olatunji. Ibitayo emphasized that this massive growth highlights the real economic value of robust data governance while signaling substantial room for future expansion.
“At NDPC, we operate on a ‘Compliance First, Not Punishment’ philosophy, which encourages organisations to comply with data protection laws through collaboration rather than immediate sanctions,” he said.
To maintain oversight without disrupting business growth, the Commission utilizes supportive mechanisms like Pre-Action Conferences (PAC) to foster corporate accountability and cooperative compliance.
Ibitayo outlined the evolution of data protection and privacy in Nigeria, noting that the country’s robust regulatory framework and the establishment of an independent Data Protection Authority have strengthened investor confidence and positioned Nigeria as a globally recognised destination for foreign direct investment.
He also highlighted the Commission’s future priorities, which include strengthening international cooperation, developing regulatory technology (RegTech) solutions, establishing a regulatory sandbox to support innovation, and launching a data privacy innovation laboratory to advance Nigeria’s digital economy and data governance capabilities.
The Regional Data Governance Exchange was organised by the Data Governance in Africa Initiative to strengthen institutional capacity and promote collaboration among African data protection authorities. The programme brought together representatives from seven countries—Nigeria, Kenya, Lesotho, Liberia, Malawi, Somalia and South Africa—to share experiences, exchange best practices and deepen partnerships in data governance across the continent.