The Nigeria Data Protection Commission (NDPC) has reinforced the critical role of human resource professionals in safeguarding personal data, as it participated in the 23rd Annual Conference of the Chartered Institute of Personnel Management of Nigeria (CIPMN), Lagos State Branch.
Representing the National Commissioner/CEO of the NDPC, Dr Vincent Olatunji, an officer in the Commission’s Media Unit, Akintomide Aroso, led a technical session titled “Cybersecurity for HR: Protecting People Data in a High-Risk World.”
During the session, Aroso underscored the responsibilities of personnel managers under the Nigeria Data Protection Act 2023, stressing the importance of strong cybersecurity governance frameworks within organisations. He highlighted key compliance principles including lawful data processing, data minimisation, and effective breach response strategies.
He further outlined the tangible benefits of compliance, while warning of the legal, operational, and reputational risks organisations face when data protection standards are not upheld.
Engaging participants in an interactive session, Aroso provided NDPC-aligned guidance on critical areas such as consent management, data subject rights, vendor due diligence, and incident reporting. He also demonstrated how these principles can be integrated into everyday HR functions, including recruitment, onboarding, payroll administration, and records management.
The session, participants noted, offered practical insights to help HR professionals embed privacy-by-design practices, strengthen organisational cybersecurity culture, and ensure sustained compliance in an increasingly data-driven workplace.
