In a stern warning to data protection compliance organisations (DCPOs), the Nigeria Data Protection Commission (NDPC) has announced plans to revoke the licences of underperforming firms.
The national commissioner of NDPC, Vincent Olatunji, delivered this message during a breakfast meeting organised for DCPOs in Lagos.
Olatunji emphasised the critical role of DCPOs in fortifying the data protection ecosystem and stressed the need for self-assessment among these organisations.
He revealed that 19 licences were revoked last year due to subpar performance and indicated the commission’s intent to continue such actions this year.
“They need to know that they have a key role to play in strengthening the ecosystem by registering data processors,” Olatunji emphasised. “What we have seen from the end of March till now in terms of registration is very low.”
He urged DCPOs to spearhead advocacy efforts by educating their clients on the significance of data protection and the imperative of registration.
Olatunji underscored the necessity of expanding the pool of registered data controllers and processors to enhance data protection nationwide.
The NDPC conducts regular evaluations of its 291 registered DCPOs, assessing the quality of their work and their contribution to advancing data protection in the country, Olatunji revealed. He highlighted the importance of gauging their performance to ensure effective regulation of the sector.
Discussing achievements, Olatunji mentioned the implementation of the roadmap introduced last year and the commission’s efforts to stimulate growth and employment opportunities. He also announced the government’s plans to establish a national certification that would enable DCPOs to operate nationwide.
In recognition of its positive impact in Nigeria, Olatunji revealed that all African data protection authorities (DPAs) would be visiting the country.
In response, Oyedokun Oyewole, president of the Institute of Information Management, acknowledged the developmental stage of the data protection industry.
He identified the lack of awareness as a major challenge faced by DCPOs, emphasising the importance of educating stakeholders about data protection.
While commending the NDPC’s efforts in creating awareness and providing guidance to businesses, Oyewole urged intensified awareness campaigns to foster a culture of responsible data handling among citizens.
He noted the institute’s proactive role in public education through initiatives like an information literacy week and an annual digital transformation awareness campaign, underscoring the importance of collective efforts in promoting data privacy in Nigeria’s increasingly digitised landscape.
