1,369 organisations (795 financial institutions, 35 insurers, 392 insurance brokers, 136 gaming companies, 10 pension companies)

Compliance notice issued (21-day deadline). NDPC, 25 August 2025.

Record ID: ng-ndpc-2025-0005
Jurisdiction: Nigeria
Regulator: NDPC
Type: enforcement notice
Date decided: 25 August 2025
Respondent type: private
Sector: banking
Violations: suspected registration failure, failure to file compliance audit returns, missing DPO designation, insufficient safeguards
Provisions cited: NDPA 2023
Outcome: compliance notice issued (21-day deadline)
Status: ongoing
Source: Official document ↗
Record verified: 14 March 2026

Summary

The NDPC issued a blanket 21-day compliance notice to 1,369 organisations across banking, insurance, pension, and gaming suspected of NDPA non-compliance. Recipients had to provide evidence of 2024 audit returns, DPO appointments, technical safeguards, and registration as data controllers or processors of major importance. Non-compliance escalates to enforcement orders, fines, and criminal prosecution.

REGISTRATION · SECTOR-SWEEP · AUDIT-RETURNS

Cite this decision

NDPC (Nigeria), 1,369 organisations (795 financial institutions, 35 insurers, 392 insurance brokers, 136 gaming companies, 10 pension companies), enforcement notice of 25 August 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/nigeria/ndpc/2025/sector-wide-compliance-notice-1369-organisations/ (accessed 22 July 2026).

Track Nigeria enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.