Nigeria’s data protection sector has grown into a N16.2 billion industry just two years after formal regulation, the Nigeria Data Protection Commission has revealed.

NDPC’s National Commissioner and CEO,
Dr. Vincent Olatunji, made this disclosure during a media workshop and capacity-building session in Lagos.

The Commission attributed the growth to increased enforcement, higher compliance activity, and growing confidence in Nigeria’s digital governance framework, noting that the NDPC was not established to generate revenue.

Olatunji stated that compliance fees and enforcement measures under the Nigeria Data Protection Act (NDPA), 2023, have created significant economic value, while also supporting government revenue and generating jobs across the country.

He noted that the revenue so far reflects a clear move from advisory regulation to enforcement-driven compliance under the NDPA.

The Commission stated that regulatory fees and sanctions have contributed more than N5.2 billion to federal revenue and supported an estimated 23,000 jobs across the country.

“These investigations have resulted in 11 major enforcement actions, including significant financial penalties and corrective directives.”

“The message is clear: violations of data privacy will attract serious consequences, regardless of the size or status of the organisation involved,” Olatunji stated.

Olatunji stated that the Commission has concluded 246 investigations into data protection and privacy breaches across various sectors, underscoring that enforcement remains central to Nigeria’s data governance strategy.

Nigeria’s data protection enforcement efforts drew national attention in July last year when the NDPC imposed a N766.2 million fine on MultiChoice Nigeria.

The penalty was related to intrusive and disproportionate data practices, including the unlawful cross-border transfer of subscribers’ personal data without sufficient safeguards.

According to the NDPC, these landmark enforcement actions have enhanced regulatory credibility, discouraged non-compliance, and strengthened trust in Nigeria’s rapidly growing digital ecosystem.

The NDPC Commissioner connected these enforcement milestones to Nigeria’s broader goal of developing a $1 trillion digital economy, emphasizing that accountability and trust are essential for digital transformation and long-term investment.

“Privacy enforcement is the foundation of digital confidence. By holding violators accountable, we are safeguarding citizens while creating the secure environment required for innovation, investment and sustainable growth,” he said.

Olatunji noted that the Commission has significantly strengthened compliance structures across the economy to support this goal, moving beyond sanctions to broader institutional capacity building.

To date, the NDPC has registered 38,677 Data Controllers and Processors of Major Importance, licensed 307 Data Protection Compliance Organisations, and received over 8,155 Compliance Audit Returns.