Nigeria’s Data Protection Sector Hits N16.2bn as Enforcement Drives Growth

Nigeria’s data protection ecosystem has expanded into a N16.2 billion industry barely two years after the introduction of formal regulation, signalling the rapid monetisation and institutionalisation of privacy compliance across the country’s digital economy.

The Nigeria Data Protection Commission (NDPC) disclosed this development during a media workshop and capacity-building session held in Lagos, where the Commission’s National Commissioner and Chief Executive Officer, Dr Vincent Olatunji, outlined the economic impact of enforcement-driven regulation under the Nigeria Data Protection Act (NDPA) 2023.

According to the NDPC, the industry’s growth has been fuelled by rising compliance obligations, regulatory fees, enforcement actions and increased confidence in Nigeria’s data governance framework. Although the Commission was not established as a revenue-generating agency, its regulatory activities have created significant economic value while also contributing to government revenue and employment.

Olatunji explained that enforcement actions and compliance fees under the NDPA have generated more than N5.2 billion in federal revenue and supported an estimated 23,000 jobs nationwide, reflecting the emergence of data protection as a structured economic sector rather than a voluntary compliance exercise.

He noted that the Commission has concluded 246 investigations into data privacy breaches across multiple industries, resulting in 11 major enforcement actions involving financial penalties and corrective directives. According to him, the NDPC has deliberately shifted from advisory regulation to strict enforcement to entrench accountability across the digital ecosystem.

“The message is clear: violations of data privacy will attract serious consequences, regardless of the size or status of the organisation involved,” Olatunji said.

Nigeria’s data protection enforcement gained national attention following several high-profile sanctions. In July last year, the NDPC imposed a N766.2 million fine on MultiChoice Nigeria for intrusive data practices, including unlawful cross-border transfer of subscribers’ personal information. Fidelity Bank was also fined N555.8 million in 2024 for processing personal data without informed consent and deploying non-transparent cookies on its digital platforms.

The NDPC said these landmark cases have strengthened regulatory credibility, deterred non-compliance and reinforced public trust in Nigeria’s digital economy.

Beyond enforcement, the Commission has expanded institutional compliance structures across the economy. It has registered 38,677 Data Controllers and Processors of Major Importance, licensed 307 Data Protection Compliance Organisations, and received more than 8,155 Compliance Audit Returns.

Olatunji linked the Commission’s progress to Nigeria’s broader ambition of building a $1 trillion digital economy, stressing that trust and accountability remain foundational to sustainable digital growth. He added that the NDPC will continue to balance enforcement with institutional strengthening to support innovation, investment and long-term economic resilience.