Physical Address
60 Ekwema Cres, Layout 460281, Imo
The NDPC is Investigating 1,369 Nigerian Companies for Privacy Breaches
The Nigeria Data Protection Commission (NDPC) is investigating 1,369 Nigerian companies for privacy breaches, and this is a big deal. It’s the toughest action the NDPC has taken since the Nigeria Data Protection Act (NDPA) became law in 2023. The Commission is checking companies across important areas like banking, insurance, pensions, and gaming to make sure they are protecting people’s personal information properly.
The NDPC is investigating Nigerian companies for privacy breaches because these businesses handle a lot of sensitive data. Banks and pension companies, for example, deal with people’s identity and financial details. Gaming companies collect user profiles, payment info, and sometimes even location data. Because this kind of information is very private, the NDPC wants to be sure these companies follow the rules set by the law.
Read Next: HFC Limited Appoints Anita Chege as Director of Innovation & Digital Transformation
Right now, the NDPC is investigating 1,369 Nigerian companies and has made it clear that they need to act fast. These companies have only 21 days to provide proof that they are following the data protection rules. This means they must submit their 2024 audit reports, show they have security measures in place, confirm they have appointed a Data Protection Officer (DPO), and prove they are registered properly as a Data Controller or Processor of Major Importance (DCPMI).
This investigation follows a big case in July 2025, when Multichoice Nigeria was fined ₦766.2 million. Multichoice was punished for not getting user permission before collecting data and for sending personal information outside Nigeria without permission. This showed everyone that the NDPC is serious about making sure companies follow the NDPA. Now, with the NDPC investigating 1,369 Nigerian companies for privacy breaches, this strict approach is being extended to many sectors.
The focus on financial and data-heavy industries is on purpose. These businesses have large amounts of sensitive customer data, which makes them important to watch closely. For many companies, this investigation is more than a legal threat – it’s a chance to fix how they handle customer data. If companies don’t follow the rules, they risk big fines, damage to their reputation, and even losing partnerships with international companies that demand strict data protection.
Besides the current investigation, the NDPC is also preparing companies for new rules coming soon. Starting September 19, 2025, the General Application and Implementation Directive (GAID) will take effect. This new directive will explain how the NDPA should be put into action, helping companies understand exactly what they need to do to keep personal data safe.
Read Next: Ghana Secures $100M Investment to Become Africa’s First AI-Powered Agri Hub
The NDPC also sees a big business opportunity from this growing focus on data protection. They estimate that licensed Data Protection Compliance Organisations (DPCOs), which help companies follow the rules, could make as much as ₦13.8 billion by 2025.
The NDPC is investigating 1,369 Nigerian companies for privacy breaches to protect people’s personal data. This investigation covers important industries that handle lots of sensitive information. Companies have a tight deadline to show they comply with the law, and new rules are coming soon. The NDPC’s actions make it clear that protecting personal data is serious business in Nigeria – and companies must do the right thing to stay safe and trustworthy.
Was this information useful? Drop a nice comment below. You can also check out other useful contents by following us on X/Twitter @siliconafritech, Instagram @Siliconafricatech, or Facebook @SiliconAfrica.
