1,368 organisations (795 financial institutions, 35 insurance companies, 392 insurance brokers, 136 gaming companies, 10 pension companies)

Compliance notice issued (21-day deadline). NDPC, 25 August 2025.

Record ID

ng-ndpc-2025-0005

Jurisdiction

Nigeria

Regulator

NDPC

Type

enforcement notice

Date decided

25 August 2025

Respondent type

private

Sector

banking

Violations

suspected registration failure, failure to file compliance audit returns, missing DPO designation, insufficient safeguards

Provisions cited

NDPA 2023

Outcome

compliance notice issued (21-day deadline)

Status

ongoing

Source

Official document ↗

Source integrity

SHA-256 ee4cf66808c63d24…

Record verified

31 July 2026

The facts

The NDPC issued compliance notices to organisations suspected of breaching the Nigeria Data Protection Act - reported as 1,368 organisations comprising 795 financial institutions, 35 insurance companies, 392 insurance brokers, 136 gaming companies and 10 pension companies. The notices require evidence of compliance within 21 days of receipt, including evidence of filing 2024 compliance audit returns, designation of a data protection officer, and a summary of technical and organisational measures.

Orders and outcome

Compliance notices with a 21-day deadline; failure to comply may result in enforcement orders, administrative fines or criminal prosecution under the Act.

REGISTRATION · SECTOR-SWEEP · AUDIT-RETURNS

Cite this decision

Track Nigeria enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.