NDPC Orders Banks, Telecommunications, & Others, to Register for Data Protection Compliance Between Now & December 2023

Smartcomply
3 min readJul 21, 2023

--

It has happened!!! The long awaited order has been issued. Do not sleep on this one.

The Nigeria Data Protection Commission (NDPC) has instructed that it is a must for all banks, telecommunications operators, and other organizations in Nigeria that control Nigerians’ data to register with the Commission between now and December 2023 for data protection compliance monitoring.

This order is coming just few months when Tinubu signed the country’s Data Protection Bill into law on June 12, 2023.

Dr. Vincent Olatunji, The National Commissioner of the NDPC, stated this on Wednesday (19th July, 2023) at a sensitization forum on the Nigeria Data Protection Act. He said that this is in line with the provisions of the Act which mandates all data controllers and data processors to get registered within 6 months of the enactment of the law.

He also added that all registered organizations will be required to file their annual audit report with the commission between January and March 2024.

He mentioned that the aim is to increase awareness so Nigerians know their rights when it comes to their data, while the registration of all organizations handling data is to ensure that the rights are preserved by all data processors and controllers in Nigeria.

Here are the important things to note;

On Registration and Audit Return

Dr. Olatunji said;

  • There are over 500,000 data controllers and processors in Nigeria. They should register with the data protection authority.
  • The law says we should give them six months to acquaint themselves with the provisions of the law.
  • We are carrying out awareness across the country, we are going to do another one in Abuja very soon.
  • The data controllers need to register with us because you can’t count them if you don’t know them.
  • Those that are captured will be monitored to see how they are managing the data in their care.
  • Between now and December 31,2023 they are to register with the commission.
  • From January 1st, 2024 to the 31st of March, 2024, they are to submit their annual audit report, telling us what they have done in the area of putting in place measures to safeguard our data with them.

On Data Subjects’ Rights

Dr. Olatunji, said;

  • Data subjects have the right to give their consent or not when their data is being collected; the right of rectification where data is not correct.
  • They also have the right of portability, that is to be able to move their data from one data controller to another.
  • Data controllers and data processors, owe the duty of care and accountability to ensure that the data with them is well protected.

On Economic Objective

Dr. Olatunji said that the aim of the data protection law is to create confidence and trust in the economy and to attract foreign direct investments in Nigeria.

Now that you are aware, let us help you get started immediately.

Contact us; 08133262024

Watch short explanatory video here.

Feel free to follow us across our social media platforms; Facebook, LinkedIn, Twitter and Instagram.

--

--

Smartcomply

Smartcomply is an automated and AI-powered cybersecurity and compliance platform that makes compliance 2x faster and saves compliance overhead costs by 70%.