NDPC investigates universities for data protection breaches
The Nigeria Data Protection Commission has launched a broad investigation into tertiary institutions over alleged violations of the Nigeria Data Protection Act. The commission, led by Babatunde Bamigboye and Dr Vincent Olatunji, aims to ensure universities and other post-secondary schools comply with data protection standards. The NDPC has issued Compliance Notices and warned of possible enforcement actions for non-compliance. This move highlights growing regulatory scrutiny as educational institutions manage increasing amounts of sensitive personal data.
TLDR
- The Nigeria Data Protection Commission is investigating tertiary institutions for alleged breaches of the Nigeria Data Protection Act.
- Compliance Notices were issued, with the names of affected institutions published in national newspapers on February 19, 2026.
- Institutions have 21 days from the notice date to provide documentation proving compliance, including audit returns for 2024 and appointment of Data Protection Officers.
- The NDPC warned that failure to comply could lead to enforcement orders, fines, or criminal prosecution.
- Dr Vincent Olatunji approved a regulatory clinic to help institutions address privacy risks and improve compliance.
