The Nigeria Data Protection Commission (NDPC) held a sensitisation workshop on Data Privacy & Protection in Lagos, during which the National Commissioner, Dr. Vincent Olatunji, urged all banks, telecom operators, educational institutions, government parastatals, and other organizations that collect and process data in Nigeria to register with the Commission. This registration is essential for data protection compliance monitoring and must be completed between now and December, 2023.
The registration requirement is in accordance with the provisions of the Data Protection Act, which mandates all data controllers and data processors to register within six months of the enactment of the law. The NDPC emphasizes that compliance is mandatory for all organizations handling personal data, and failure to register within the stipulated timeframe may result in penalties.
Dr. Vincent Olatunji further stated that registered organizations must also file their annual data compliance audit reports with the Commission between January and March each year. This measure is crucial in ensuring transparency and accountability in data processing practices.
The NDPC is committed to increasing awareness among Nigerians about their data rights. By ensuring the registration of all organizations handling data, the Commission aims to preserve and protect individuals’ data rights in Nigeria.
Speaking on the importance of data protection, Dr. Vincent Olatunji said, “Our data protection law is designed to create confidence and trust in the economy, attracting foreign direct investments into Nigeria. With a workable legal framework on data protection and privacy, even children who cannot ordinarily give legitimate consent are protected. Data subjects have the right to give consent or refuse it when their data is being collected, and organizations must exercise care and accountability to ensure data security.”
The NDPC boss also highlighted the significance of the Data Protection Law in enhancing foreign direct investment in the country. Having a robust data protection legal framework reassures potential investors that their data and businesses will be safeguarded.
“The Data Protection Authority plays a critical role in ensuring that data breaches are minimized, and data subjects’ identities remain secure in the digital space,” added Babatunde Bamigboye Esq, the Head of Legal Enforcement & Regulations Department at NDPC.
The Data Protection Act was signed into law by President Bola Ahmed Tinubu on June 12 of this year, transforming the existing National Data Protection Bureau into the Nigeria Data Protection Commission. The Commission is now responsible for driving the implementation of the law and protecting the data rights of all individuals in the country.
The NDPC encourages all relevant organizations to promptly register and comply with the Data Protection Act to secure the data privacy of Nigerian citizens and foster a conducive environment for economic growth and investments.