By Chimezie Godfrey
The Nigeria Data Protection Commission (NDPC) has issued a regulatory advisory to data controllers and processors across the country following what it described as escalating threats to Nigeria’s data security architecture.
The commission disclosed that its technical assessment revealed coordinated attacks by suspected cyber threat actors targeting financial systems and critical digital infrastructure nationwide.
In a statement signed by the Head, Legal, Enforcement and Regulations, Babatunde Bamigboye, the NDPC urged both public and private organisations to strengthen their data protection frameworks in line with the Nigeria Data Protection Act, 2023.
The commission reminded Ministries, Departments and Agencies of the presidential directive by President Bola Tinubu, which emphasised the strategic importance of data.
It quoted the President as saying, “Data is the new oil, its value increases the more it is refined and responsibly shared. I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act 2023.”
The NDPC stressed the need for urgent action, warning that failure to comply with statutory requirements could attract legal consequences.
It outlined key measures organisations must adopt, including the appointment of certified Data Protection Officers, implementation of privacy policies, and conduct of Data Privacy Impact Assessments.
Other recommended steps include deployment of multi-factor authentication, adoption of zero-trust security architecture, continuous system patching, and securing cloud infrastructure.
The commission also emphasised the importance of real-time monitoring, encryption protocols, vulnerability assessments, and regular system backups.
It added that it remains committed to supporting organisations to achieve compliance while ensuring the protection of personal data across all sectors.

