By 
NDPC and NCC Deepen Regulatory Collaboration
Nigeria’s digital economy recorded a significant milestone as the Nigeria Data Protection Commission (NDPC) and the Nigerian Communications Commission (NCC) signed a Memorandum of Understanding (MoU). This new deal is aimed at strengthening data protection enforcement across the telecommunications sector.
RELATED: NDPC kicks off National Privacy Week 2026, honours Bosun Tijani as data privacy champion
The agreement is designed to prevent unauthorised access to personal data, and enhance regulatory cooperation. It will also safeguard user information within Nigeria’s fast-growing digital ecosystem, which serves over 230 million telecom subscribers.
Protecting Data in a Rapidly Expanding Digital Economy
Speaking at the signing ceremony, Dr Vincent Olatunji, National Commissioner and CEO of the NDPC, commended the NCC’s Executive Vice Chairman, Dr Aminu Maida, for prioritising data privacy and protection among mobile network operators.
Dr Olatunji stressed that meaningful progress in data protection cannot be achieved in isolation. He noted that effective enforcement depends on strong collaboration between regulators.
“Prioritising privacy in the telecommunications sector cannot be overemphasised,” he said.
He described the MoU as a critical step toward strengthening trust, compliance, and accountability in Nigeria’s digital economy
NCC Reaffirms Commitment to Data Privacy Compliance
In his remarks, Dr Maida agreed on the need for closer inter-agency cooperation to deliver on regulatory mandates. He noted that data protection and privacy have become global concerns, driven by rising digital adoption and increasing cyber risks.
He reaffirmed the NCC’s commitment to ensuring that all licensees under its regulatory oversight comply fully with the provisions of the Nigeria Data Protection Act (NDPA) 2023. This is particularly so as telecom networks continue to process vast volumes of personal and sensitive data.
Immediate Implementation Signals Strong Enforcement Drive
Both regulators confirmed that implementation of the MoU would commence immediately, signalling a shared resolve to strengthen enforcement. This deal will improve compliance. and enhance regulatory coordination within Nigeria’s telecommunications industry.
The partnership is expected to streamline oversight, reduce regulatory gaps, and ensure that mobile network operators adopt privacy-by-design principles across their operations.
Legal Framework Governing Data Protection in Telecoms
Data protection in Nigeria’s telecoms sector is governed by the Nigeria Data Protection Act (NDPA) 2023, which replaced the former Nigeria Data Protection Regulation (NDPR). Enforcement is led by the NDPC, working closely with the NCC.
In 2025, a dedicated inter-agency working group was established to strengthen compliance monitoring for telecom operators, classified as Data Controllers of Major Importance, serving more than 164 million active subscribers.
Key Data Protection Requirements for Telecom Operators
Under Nigeria’s data protection regime, telecom licensees are required to comply with the following obligations:
- Regulatory Framework:
Compliance with the NDPA 2023 and the NCC Consumer Code of Practice Regulations, 2007, which mandate the protection of customer information. - Data Minimisation:
Personal data must be collected only for specific, legitimate purposes and retained for no longer than necessary. - Security Measures:
Operators must implement robust safeguards, including encryption, breach prevention controls, and access management, to prevent unauthorised disclosure. - Third-Party Data Sharing:
Transfer of subscriber data to third parties is restricted unless authorised by the user or required by law. - Mandatory Annual Audits:
Telecom operators must conduct annual data protection audits to demonstrate compliance.
Strengthening Subscriber Rights and Trust
The NDPA guarantees subscriber rights, including the right to access, correct, delete, and object to the processing of personal data. This collaboration is expected to strengthen enforcement of these rights. It will also improve consumer confidence, and support the sustainable growth of Nigeria’s digital economy.
