Nigerian Firms Face Fines, Breaches as Data Law Tightens

Many businesses in Nigeria are unprepared for a major data protection crackdown. This leaves them open to severe penalties and dangerous security failures. The Nigeria Data Protection Commission (NDPC) is now actively enforcing the Nigeria Data Protection Regulation (NDPR). The law governs how organizations must collect, secure, and use citizens' personal information. Experts warn that numerous companies are still not compliant. This non-compliance can result in large fines. More critically, it often means customer data is poorly protected and vulnerable to theft. The NDPR requires businesses to have clear data privacy policies, secure their digital systems, and report any breaches. The commission's increased enforcement follows a grace period for organizations to adapt. Companies are urged to audit their data practices immediately to avoid legal action and protect their customers.