Importance of robust data management and protection laws in today's digitized world
Purpose of the National Commissioner of Nigeria Data Protection Bureau (NDPB)
In today’s highly digitized world, it is crucial for nations to have robust data management and protection laws. These laws are necessary to safeguard both corporations and individuals from data breaches and identity thefts, such as stolen information, recording keystrokes, phishing, and others. Recognizing this need, the Federal Government of Nigeria established the National Commissioner of Nigeria Data Protection Bureau (NDPB). The primary purpose of this agency is to create, manage, and ensure compliance with global best practices in data protection and management among organizations in Nigeria.
Dr. Vincent Olatunji, the first National Commissioner of the NDPB, spoke to a select group of media personalities and emphasized the agency’s commitment to enforcing stringent requirements for data protection in Nigeria. He stated, “We are here to ensure that Nigerian corporations and public offices align with national laws and acts concerning data protection. We are fully aware of this responsibility and will not hesitate to penalize any organization that fails to comply with these laws.”
“We have already imposed fines on several banks that neglected data protection measures. We ensure that these fines are paid promptly. The minimum fine we impose is 2 million naira or two percent of the organization’s annual earnings. Our aim is to create a safe environment for organizations and instill confidence in data subjects conducting business in Nigeria.”
Regarding the recent announcement by the Central Bank of Nigeria on Nigerians submitting their social media handles, Dr. Vincent expressed his concerns. He believes that this requirement is improper and imposes an undue burden on data subjects. He assured that the NDPB is actively working with the Central Bank to find a lasting solution to this issue.
Addressing the funding of the new agency, Dr. Vincent clarified, “We are a non-profit agency, currently receiving funding from the presidency for the initial two years. After that, we will gradually become self-sustaining. While penalties will contribute to our funding, our primary focus is ensuring organizations adhere to global best practices in data protection rather than generating profits.”
In terms of capacity building, Dr. Vincent highlighted the NDPB’s efforts to train approximately five hundred thousand officers across the country. These trained officers will be deployed in various organizations to ensure compliance with data protection and management processes. Furthermore, he emphasized that the NDPB collaborates with the National Identity Management Commission (NIMC) and other agencies to enforce Data Protection Laws effectively.
Anthony Emeka Nwosu