The Nigeria Data Protection Commission (NDPC) is cracking down on data privacy violations by investigating popular platforms TikTok and Truecaller. This move showcases the commission’s dedication to enforcing the Nigeria Data Protection Act (NDPA) and ensuring that both local and international companies adhere to regulations while operating in the country.
Compliance with data protection regulations in Nigeria has significantly increased from 4% to over 55% due to the NDPC’s enforcement efforts and engagement with stakeholders. Dr. Vincent Olatunji, the National Commissioner and CEO of the NDPC, emphasized the commission’s proactive approach during a recent press conference in Abuja. He stated that they are currently investigating TikTok and Truecaller for potential data privacy breaches.
Olatunji also highlighted the NDPC’s preference for a collaborative approach in addressing data breaches. If companies under investigation take remedial actions to correct identified lapses, the commission is willing to work with them to achieve compliance. This approach focuses on corrective action and fostering a culture of data protection rather than just imposing punitive measures.
The NDPC’s efforts have led to a significant improvement in compliance rates among organizations, with adherence to data protection regulations now surpassing 55%. This upward trend indicates a growing awareness and commitment to data privacy within Nigeria’s corporate sector.
This is not the first time that the NDPC has scrutinized companies for data privacy concerns. In June 2024, the commission fined seven Nigerian companies ₦400 million for compromising user data. Additionally, in September 2019, the National Information Technology Development Agency (NITDA) investigated Truecaller for alleged privacy rights breaches.
Globally, TikTok has faced criticism for its data collection practices, with the U.S. Federal Trade Commission (FTC) launching an investigation in March 2024. The ongoing investigations by the NDPC serve as a reminder for businesses operating in Nigeria to prioritize data protection to avoid substantial fines and reputational damage.
To further enhance data protection compliance, the NDPC has partnered with the Federal Ministry of Youth Development to train 5,000 Nigerian youths as data protection professionals. As the commission continues to enforce the NDPA, organizations must implement robust data protection measures to comply with regulations and safeguard user privacy in Nigeria’s digital landscape.
