Nigeria Data Regulator Tightens Privacy Enforcement
Coverage from Simpa Labs, Global Law Experts, and others

Nigeria’s Data Protection Commission is expanding enforcement of the Nigeria Data Protection Act 2023 across major data-processing environments.
It is reviewing more than 1,000 educational institutions while also directing social media platforms to address unauthorized filming and publication of people’s images. The actions signal a broader shift toward direct regulatory scrutiny of organizations, platforms, and individuals handling personal data.
The story is largely stable, but the framing has tightened: the NDPC is now explicitly described as enforcing the Nigeria Data Protection Act 2023 across broader data-processing environments, not just schools and named platforms. The current version also generalizes the platform directive and harm language, while adding named officials to the actors involved.
The story has shifted from general privacy enforcement to a more specific, broader NDPC crackdown centered on education institutions and public-image violations on social media. The new version adds concrete compliance demands, a large-scale school review, and the threat of sanctions or prosecution.
