By Adedapo Adesanya
The Nigeria Data Protection Commission (NDPC) has indicated that despite recent advances, issues continue in compliance with data mandates in Nigeria’s corporate and public sectors.
This was disclosed by the commission’s National Commissioner, Mr Vincent Olatunji, who noted that more than 1,000 financial institutions, schools, insurance companies, and consultancy firms are currently undergoing investigations for various degrees of breaches of citizens’ data.
Speaking during the first anniversary of the signing into law of the Nigeria Data Protection Commission Act by President Bola Tinubu in Abuja, he said there have been increased levels of compliance with the law in both the private and public sectors.
Recall that on June 12, 2023, President Tinubu assented to the data protection bill to advance privacy rights and other fundamental freedoms both in cyberspace and in analogue transactions.
“When we started, the levels of compliance within the private sector was about 49 per cent while the public sector was 4 per cent. But today, private sector compliance is above 55, while the public sector has reached 15 per cent “, Olatunji said.
He, however, called for improvement in terms of compliance for the sectors.
Speaking further, the NDPC commissioner stated, “As of this time last year, we were so unsure if the president would assent to the bill, what if the president didn’t sign it, what would have happened? The bill was passed by the ninth Assembly and usually, when a new government comes in, they want to jettison all that the former government did before it got there. More importantly, it was a new government. I was apprehensive, everyone was worried but I kept faith in God even though I was not sure too and on the 12th of June last year, the president signed it.”
Speaking further, Mr Olatunji emphasised that the nation’s data ecosystem has surpassed a value of N10 billion due to the multiplier effect of assenting to the bill.
He stressed the commission’s commitment to safeguarding citizens’ data by global best standards and practices, deeming it essential for ensuring its safety, security, and protection.
The national commissioner said, “Cumulatively, we have had over 1,000 reports of data breaches between when we started and now. The figure is low because of the low level of awareness among Nigerians.”
“We have finalised four major investigations and some have paid their remediation fees. In the law, we can fine companies depending on the nature of the breach, impact on the subject and level of cooperation and we got N400m from remediation fees,” he added.
He added that ongoing investigations were being conducted concerning data infractions.
He also said the commission had concluded arrangements to train 10,000 public servants in responsible data management, while about 1,000 data protection officers and processors including journalists would undergo training by the NDPC.
To check the activities of digital loan platforms, Olatunji said the NDPC collaborated with CBN, ICPC, EFCC, and other regulatory authorities, lamenting that most of the illegal digital loan platforms had no known or traceable addresses.
He, however, emphasised that ongoing efforts would focus on raising awareness among vulnerable Nigerians who fall prey to loan sharks due to lack of knowledge.
He noted that the nation’s large population and vast landmass pose challenges to fully clamping down on the activities of digital loan sharks, as many operate from isolated or remote areas without identifiable addresses.