The Nigeria Data Protection Commission (NDPC) is the primary regulatory body responsible for data protection in Nigeria. The NDPC licenses and oversees private organizations, known as Data Protection Compliance Organizations (DPCOs), that provide compliance services to other companies.
Key regulatory bodies
- Nigeria Data Protection Commission (NDPC): Established by the Nigeria Data Protection Act (NDPA) of 2023, the NDPC is the independent government agency that enforces data privacy and protection in Nigeria. It replaced the Nigeria Data Protection Bureau (NDPB) and is responsible for:
- Enforcing compliance with the NDPA.
- Licensing and supervising DPCOs.
- Investigating complaints and data breaches.
- Promoting public awareness of data protection rights and obligations.
- Before the establishment of the NDPC, NITDA was the body responsible for implementing Nigeria’s data protection regulations. The NDPA and new directives have updated this framework, but NITDA’s earlier regulations, such as the Nigeria Data Protection Regulation (NDPR) of 2019, remain a significant part of the legal landscape.
Data Protection Compliance Organizations (DPCOs)
DPCOs are private sector organizations licensed by the NDPC to assist other entities—known as Data Controllers and Data Processors—in complying with data protection laws.
Services offered by DPCOs typically include:
- Data Audit Services: Conducting audits to identify gaps in an organization’s data privacy and protection practices.
- Compliance Implementation: Helping organizations develop and implement policies, contracts, and internal procedures that align with the law.
- Outsourced Data Protection Officer (DPO): Serving as an outsourced DPO for companies that need expertise without hiring a full-time in-house officer.
- Training and Advisory Services: Educating employees and management on data privacy best practices and legal requirements.
- Breach Management: Providing support and planning for data breach remediation.
- Regulatory Liaison: Assisting with mandatory filings and communication with the NDPC.
Examples of licensed DPCOs
The NDPC maintains a public repository of licensed DPCOs. Some examples of these organizations include:
- CYBERGON LIMITED
- BDO Professional Services
- Adeolu Adeyanju Consulting
- Digiterhub Solutions & Services Ltd
- George Etomi and Partners
- Trenchard Partners
CONTACT A DPCO
