Nigeria Data Protection Commission Elevates Data Protection Standards
TECH DIGEST- Nigeria Data Protection Commission (NDPC) has issued a Code of Conduct for Data Protection Compliance Organizations (DPCOs) in Nigeria. This strategic initiative signals the NDPC’s intensified focus on enforcement in the coming year, underlining the importance of professionalism among firms licensed to provide compliance services.
During a virtual meeting with DPCOs, Dr. Vincent Olatunji, the National Commissioner/CEO of the NDPC, emphasized the Code of Conduct’s critical role in ensuring adherence to rules and regulations, fostering sanity, and promoting industry growth. Olatunji urged DPCOs to recognize their role in implementing the Nigeria Data Protection Act (NDPA) 2023 as a public trust, emphasizing the need for a sense of responsibility in safeguarding privacy.
Under Section 33 of the NDPA 2023, the NDPC holds the power to license entities with expertise in data protection to monitor, audit, and report on compliance by data controllers and processors. Olatunji highlighted the unique Public-Private Partnership model, designed to instill trust and confidence in Nigeria’s digital economy, which relies on robust data processing.
Read Also:
The Code of Conduct outlines various compliance services offered by DPCOs, including awareness and capacity building, registration of data controllers or processors, development and implementation of compliance schedules, NDPA compliance audits, data privacy impact assessments, and facilitation and vetting of data privacy agreements.
To operate as a DPCO and provide compliance services, firms must obtain a license from the commission and have a certified data protection officer (DPO). As of November 2023, the NDPC has licensed approximately 163 DPCOs, with the Association of Licensed Data Protection Compliance Organizations of Nigeria (ALDAPCON) serving as the umbrella body.
Presenting the Code of Conduct to DPCOs, Babatunde Bamigboye, the Commission’s Head of Legal, Enforcement, and Regulations, highlighted the target objectives and principles, including Privacy Consciousness, Capacity Building, Accountability, Data Ethics, and Corporate Social Responsibility. All DPCOs will be held accountable in accordance with NDPA provisions, the Code of Conduct, and other regulatory instruments issued by the commission.
This initiative underscores the NDPC’s commitment to elevating data protection standards, fostering accountability, and ensuring ethical data practices in Nigeria’s digital landscape. As the NDPC takes proactive steps, it sets the stage for a more secure and privacy-conscious digital ecosystem.
 has issued a Code of Conduct for Data Protection Compliance Organizations (DPCOs)){kind=link}