NDPC Flags Compliance Gaps, Skills Shortage in Nigeria’s Data Protection Ecosystem

The National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission (NDPC), Dr Vincent Olatunji, has identified low compliance among government institutions and a shortage of skilled data protection professionals as major challenges confronting Nigeria’s data governance framework.

Dr Olatunji disclosed this during a strategic briefing with the Permanent Secretary of the Federal Ministry of Communications, Innovation and Digital Economy, Engineer Nadungu Gagare, where he presented an overview of the Commission’s activities, achievements, and future priorities.

While welcoming and congratulating the Permanent Secretary on his appointment, the NDPC boss underscored the importance of sustained institutional collaboration to strengthen Nigeria’s data protection regime, particularly at a time when digital services and data-driven governance are expanding rapidly across the country.

At the heart of the briefing was the Nigeria Data Protection Act, 2023, which Dr Olatunji described as a landmark legislation that has significantly repositioned Nigeria in the global digital economy. Signed into law by President Bola Ahmed Tinubu, GCFR, on 12 June 2023, the Act formally established the NDPC and provided a robust legal framework for safeguarding personal data in line with international best practices.

According to him, the law has not only strengthened citizens’ data rights but has also enhanced Nigeria’s credibility as a secure destination for foreign direct investment, especially in technology, fintech, and digital services sectors where data protection is a critical consideration.

Dr Olatunji explained that the Commission’s Strategic Roadmap and Action Plan (SRAP) is deliberately aligned with President Tinubu’s eight-point priority agenda, as well as the five strategic pillars of the Federal Ministry of Communications, Innovation and Digital Economy. He noted that implementation is ongoing across all pillars, with measurable progress already recorded.

He highlighted milestones achieved by the NDPC since its establishment, including growing global recognition, strategic international collaborations, increased public awareness, enforcement actions, job creation within the data protection ecosystem, revenue generation, and the expansion of Nigeria’s data protection value chain.

Despite these gains, the NDPC boss warned that structural challenges continue to slow progress. He listed the inadequate number of qualified data protection experts, low remuneration for Commission staff, and weak compliance levels among Ministries, Departments, and Agencies (MDAs) as critical issues requiring urgent attention.

To address these gaps, Dr Olatunji outlined a forward-looking strategy focused on intensified awareness campaigns, deeper engagement with MDAs, and deliberate efforts to recruit, train, and retain data protection professionals capable of sustaining the country’s growing digital economy.

The briefing, he noted, was part of broader efforts to ensure policy alignment, institutional support, and long-term sustainability of Nigeria’s data protection framework as digital transformation accelerates nationwide.