The Nigeria Data Protection Commission (NDPC) has initiated investigations into popular platforms TikTok and Truecaller over alleged data privacy violations. This move underscores the commission’s commitment to enforcing the Nigeria Data Protection Act (NDPA) and ensuring compliance among both local and international companies operating within the country.

Compliance with data protection regulations in Nigeria has risen from 4% to over 55% due to the NDPC’s enforcement and stakeholder engagement efforts.

Dr. Vincent Olatunji, the National Commissioner and CEO of the NDPC, highlighted the commission’s proactive approach during a recent press conference in Abuja. He stated, “As we speak, we have even gone to the extent of investigating multinationals. We are currently investigating TikTok and Truecaller in the area of data privacy.”

Furthermore, Olatunji noted that the NDPC prefers a collaborative approach when addressing data breaches. He mentioned that if companies under investigation undertake remediation efforts and correct identified lapses, the commission is open to working with them to achieve compliance.

This strategy underscores the NDPC’s focus on corrective action and fostering a culture of data protection rather than solely imposing punitive measures.

The NDPC’s efforts have yielded significant improvements in compliance rates among organisations. Initially, only about 4% of organisations adhered to data protection regulations.

However, through increased enforcement and active engagement with stakeholders, compliance levels have now surpassed 55%. This upward trend indicates a growing awareness and commitment to data privacy within Nigeria’s corporate sector.

This is not the first time that the NDPC is putting companies under scrutiny for data privacy concerns. In June 2024, the NDPC fined seven Nigerian companies ₦400 million for compromising users data.

Previously in September 2019, the National Information Technology Development Agency (NITDA) initiated an investigation into Truecaller over alleged breaches of privacy rights.

Globally, TikTok has faced criticism for its data collection practices. In March 2024, the U.S. Federal Trade Commission (FTC) launched an investigation into TikTok over its data and security practices.

The NDPC’s ongoing investigations serve as a critical reminder for businesses operating within Nigeria to prioritise data protection. Non-compliance with the NDPA can lead to substantial fines and reputational damage.

To further strengthen data protection compliance, the NDPC has partnered with the Federal Ministry of Youth Development to train 5,000 Nigerian youths as data protection professionals.

The NDPC’s investigations into TikTok and Truecaller underscore the importance of data protection in Nigeria’s digital landscape. As the commission continues to enforce the NDPA, organisations must ensure robust data protection measures to comply with regulations and protect user privacy.