On 25 August 2025, the Nigeria Data Protection Commission (NDPC) issued a public notice on compliance with the Nigeria Data Protection Act 2023 (the NDP Act). As part of its sector-by-sector review, the Commission identified 1,368 Nigerian companies as non-compliant with the provisions of the Act.
These organizations are now required to provide the following within 21 days of the notice;
- Evidence of filing NDP Act compliance Audit returns for 2024;
- Evidence of designation or Appointment of a Data Protection Officer (including name and contact details);
- Summary of Technical and Organisational measures for data protection within the organization; and
- Evidence of Registration as a Data Controller or Processor of Major Importance
