As Nigeria’s digital economy accelerates toward a projected $450 billion valuation, the Nigeria Data Protection Commission (NDPC) has launched a strategic offensive to ensure the nation’s privacy practices meet and exceed international standards.
In April 2026, the commission, led by Dr. Vincent Olatunji, pivoted from local enforcement to a global “adequacy” push. The goal is clear: to make Nigeria the safest destination for international data flows in Africa.
To compete with Silicon Valley and the EU, Nigeria needs experts who speak the language of global privacy. In mid-April, the NDPC kicked off the second edition of its Data Protection Officers (DPO) Certification program. This isn’t just a local certificate; it is designed to align with the GAID 2025 (General Application and Implementation Directive), positioning Nigerian DPOs to manage data for global multinationals.
Dr. Olatunji noted that the global scarcity of certified privacy professionals is an opportunity for Nigeria to export “digital trust” as a service.
The NDPC has introduced strict new “gatekeeping” rules for any data leaving Nigerian soil. Under the GAID 2025 framework, companies can no longer simply ship data to foreign servers without proof of protection.
• Standard Contractual Clauses (SCCs): Organizations must now use standardized, NDPC-approved contracts for international transfers.
• Whitelisting Nations: The commission is actively evaluating the “adequacy” of other jurisdictions, ensuring that Nigerian citizens’ data whether stored in a cloud in Dublin or a server in Mumbai enjoys the same constitutional protections it has at home.
The NDPC has proven it is not afraid to challenge major institutions. In a flurry of activity throughout April 2026, the commission has Secure 94 Million Identities to form a strategic pact with INEC to audit and safeguard voter privacy and also partnered with NELFund to secure the personal data of 1.3 million student loan applicants.
They have also publicly flagged alleged data breaches at major entities like Sterling Bank, Remita, and the Corporate Affairs Commission (CAC).
The NDPC is pitching data protection not as a “tax on innovation,” but as a risk management tool. Through its IMPACT Initiative, the commission is showing Nigerian businesses that filing their Compliance Audit Returns (CAR) is the fastest way to win the trust of foreign investors.
By policing its own borders with international rigor, Nigeria is sending a message to the world: your data is safe with us.
