Nigeria

The Nigeria Data Protection Commission (NDPC) is a statutorily independent regulatory body that has been set up under the Nigeria Data Protection Act of 2023 with a mandate to safeguard the basic right to privacy of Nigerians. As a fully independent organization, the commission was formed out of the erstwhile Nigeria Data Protection Bureau in order to act as the apex body for regulating data processing in both the public and private sectors of Nigeria. The institution works towards protecting the digital rights of citizens by ensuring that companies and organizations process citizens' data in accordance with international standards on data privacy.

Since its creation, the Nigeria Data Protection Commission (NDPC) has continued to enforce data protection laws, carry out audit inspections, and investigate any cases of non-compliance with the privacy law within the public and private sectors in Nigeria. The NDPC, through the NDPA 2023, is mandated to register large data controllers and processors, develop conditions that will ensure legitimate data processing takes place, and license DPCOs for data protection regulation. It has the mandate to notify data breaches within 72 hours, evaluate higher-risk data protection impact assessments, levy administrative sanctions, and carry out data privacy awareness campaigns.