The Sight News | Editorial
Digitization is rapidly growing in Nigeria and with this growth, comes the need to strengthen the enforcement of data privacy and protection, especially in the telecommunication industry. It was on this backdrop that the Nigerian Communications Commission (NCC) and the Nigerian Data Protection Commission (NDPC) signed a Memorandum of Understanding (MOU) recently to provide a structured framework for both organizations to advance data protection.
The NCC, as the regulator of telecommunications and the NDPC, as the authority on data protection share overlapping responsibilities in ensuring that citizens’ personal information is secure. However, there is also a responsibility on the part of the consumers to know their rights and responsibilities, how to practice safe digital usage and to understand the laws in Nigeria that protect their personal data.
“People need to be aware of the data they are generating, and they need to know their rights around that data. If they don’t know it, somebody will monetise it. When platforms are said to be free, they are not really free. Somebody is using your data”, the NCC’s Executive Vice Chairman (EVC) and Chief Executive Officer (CEO), Dr Aminu Maida had said at the signing of the MOU which took place recently in Abuja.
He also noted that data protection and privacy regulations have become important to the future of the communications industry and that effective regulation of data within the sector is critical to sustaining trust, innovation, and growth, particularly as Nigeria transitions deeper into the digital and artificial intelligence era.
Telecom consumers cannot fully understand their rights and practice safe usage if they lack the knowledge of what those rights are, as well as the legislation backing those rights especially in a country like Nigeria.
Understanding the Nigeria Data Protection Act, 2023
The Nigeria Data Protection Act, 2023 (NDPA) is a legislation that gives individuals greater control over their personal information. Being the country’s first comprehensive data protection law, the NDPA protects the personal data of individuals in Nigeria and regulates how personal data is collected, used, stored, and processed by public and private entities.
The NDPA, which became effective on June 12, 2023, takes the place of the Nigerian Data Protection Regulations, 2019 (NDPR) and establishes a robust and clear compliance framework for personal data protection by organizations in Nigeria.
Some of the benefits of the NDPA includes: Protection of personal data of individuals in Nigeria; Promotion of best data processing practices that safeguards the security of personal data and the privacy of data subjects; Enforcing responsible handling of information by organisations; and Helping Nigeria achieve a competitive advantage globally, especially when dealing with companies that require strong privacy safeguards before sharing data.
While this legislation applies to entities that are based or operating in Nigeria, performs data processing in Nigeria or processes personal data of data subjects in Nigeria; it also particularly applies to banks and fintech companies, telecom operators, government agencies, Nongovernmental organisations and schools, healthcare providers, online platforms serving Nigerian Users, as well as startups and Small and Medium Enterprises handling customer data.
Data Rights of Individuals in Nigeria
Individuals in Nigeria have legally protected rights over their personal data and this includes:
Right to information about data processing: Businesses must inform data subjects about their data processing before processing any data
Right to access: Individuals have the right to access their personal data
Right to rectification: Individuals have the right to request the rectification of inaccurate or outdated data
Right to deletion: Individuals have the right to request deletion of data when it is no longer needed or if consent is withdrawn
Right to restrict processing: People have the right to oppose processing of sensitive data or processing used for direct marketing
Rights related to automated decision-making: Individuals are protected against decisions based solely on automated processing, especially when such decisions significantly impact their rights or freedoms
Right to data portability: Individuals have the right to transfer their data to another service provider
Right to withdraw consent: Individuals may withdraw consent at any time and as easily as it was given
NCC’s Data Privacy Awareness
The Nigerian Communications Commission (NCC) as a regulator seized the National Privacy Week 2026 in supporting public awareness on data privacy risks, consumer rights in the telecommunications sector as well as safe use of digital services.
While urging Nigerians to protect their data in order to protect their future, the Commission provided a five minute privacy checklist as follows:
- Review app permissions
- Limit location sharing
- Check SMS access
- OTP risk
- Delete unused accounts
- Enable Two Factor Authentication (2FA) on banking apps
It also listed privacy red flags that individuals should watch out for and they include:
- Sharing your call records for advertising without a lawful basis
- Disclosing your location history to third parties without a lawful basis
- Using personal data to train Al without transparency and appropriate safeguards
“During the National Privacy Week, we are reinforcing our ongoing collaboration with the NDPC to ensure that telecommunications licensees understand their obligations and that consumers are aware of their rights”, the NCC Spokesperson, Nnenna Ukoha announced in a statement marking the National Privacy Week.
The ball is now in the court of consumers in Nigeria to know their rights and if they have concerns regarding data handling by telecom providers they are encouraged to use the NCC Consumer Portal at consumer.ncc.gov.ng or call the 622 toll-free line.
