NDPC Targets Stronger Data Protection in Telecoms, Finance Sectors

By Àkànní Olúwaségún Michael

The Nigeria Data Protection Commission (NDPC) has commenced consultations with stakeholders to develop sector-specific data protection and privacy frameworks for the telecommunications, financial, and hospitality sectors, in a move aimed at strengthening compliance with Nigeria’s data privacy laws.

Speaking at a stakeholder engagement in Abuja, the National Commissioner and Chief Executive Officer of the NDPC, Dr Vincent Olatunji, said the initiative was designed to support the implementation of the Nigeria Data Protection Act 2023 by providing industry-tailored compliance guidelines.

Olatunji said the commission recognised that while the Act provides a broad legal framework for data protection across Nigeria, sectors such as telecommunications, finance, and hospitality face unique challenges in collecting, storing, and processing personal data.

He noted that stakeholder engagement remains a key part of the commission’s rule-making process, bringing together regulators, policymakers, industry leaders, and academics to contribute to the development of practical and enforceable regulations.

“The Commission prioritises stakeholder engagement because stakeholders contributed significantly to the drafting of the Nigeria Data Protection Act and the General Application and Implementation Directive,” he said.

According to him, the engagement seeks to draw on the expertise of industry players to develop guidelines that are practical, proportionate, and capable of addressing sector-specific risks.

The proposed frameworks are expected to provide clearer guidance for organisations operating in data-intensive sectors, helping them understand their obligations under the law and improve compliance standards.

For businesses, the move could reduce uncertainty around data protection requirements by providing industry-specific rules and best practices. For consumers, it is expected to strengthen safeguards around the handling of personal information, reduce the risk of data breaches and improve accountability among organisations that collect and process personal data.