Nigeria data regulator collects 400 million naira in fines

Nigeria's data protection authority has collected 400 million naira in fines from seven companies found to have breached citizens' personal data.

The penalties were disclosed by Vincent Olatunji, the National Commissioner of the Nigeria Data Protection Commission. The regulator, established to safeguard the privacy of individuals' information in Africa's most populous nation, began enforcing compliance with data protection laws several years ago.

Nigeria introduced comprehensive data protection regulations in 2023 to address growing concerns over how organisations handle personal information. The rules require companies to obtain consent for data processing, implement security measures and report breaches promptly.

The commission's enforcement actions reflect efforts to build a credible regulatory framework in a country where digital services have expanded rapidly. Nigeria is home to a large technology sector, including fintech firms, e-commerce platforms and telecommunications operators that manage vast amounts of consumer data.

Data breaches in Nigeria have previously exposed millions of citizens to risks such as identity theft and fraud. The regulator aims to deter future violations by imposing financial penalties on non-compliant organisations.

Olatunji's statement highlights the commission's focus on accountability for entities entrusted with sensitive personal information. The fines represent revenue for the regulator while signalling its willingness to act against major players.

The development comes as other African countries strengthen their own data protection regimes, seeking to balance innovation with privacy rights in increasingly digital economies.

Based on reporting by Techpoint Africa.