Data breach: NDPC probes 240 cases, flags 1,900 organisations

The Nigeria Data Protection Commission (NDPC) has investigated more than 240 data breach cases and identified over 1,900 organisations for non-compliance with the country's data protection regulations. At the opening of a two-day capacity-building workshop for judicial officers, NDPC's National Commissioner, Dr. Vincent Olatunji, disclosed this information.

The commission has also issued over 20 major remediation orders and over 1,900 Public Notices to drive remediation. Over 41,000 data controllers and processors of major importance have been registered by the NDPC within three years, and 367 Data Protection Compliance Organisations have been licensed to support compliance nationwide.

Nigeria's expanding digital economy has necessitated stronger data protection safeguards, particularly with electronic transactions, virtual court hearings, and digital communication increasingly exposing citizens to risks associated with personal data processing. The Data Protection Act 2023, implemented in Nigeria, establishes additional mechanisms for safeguarding personal information and provides a legal framework for the protection of personal data.

The judiciary plays a crucial role in resolving disputes arising from regulatory decisions and ensuring individuals' rights to access, correct, and erase personal information.