Background
The Nigeria Data Protection Commission (NDPC) via public notice on August 25, 2025, announced that it has begun a sector-by-sector investigation of organisations suspected of breaching the Nigeria Data Protection Act (NDPA) 2023. A press release signed by Babatunde Bamigboye, Head of Legal, Enforcement & Regulations, explains that the investigation is mandated by sections 5(i), 6(a), 6(c), 46(3) and 47(1)–(2)(a-b) of the Act and aims to safeguard the fundamental rights, freedoms and interests of data subjects, while building trust in Nigeria’s digital economy.
