By Peter Omopo
The has launched a nationwide investigation into tertiary institutions as part of efforts to enforce compliance with the Nigeria Data Protection Act (NDP Act) 2023.
The move marks a shift from advisory oversight to active regulatory scrutiny, with the Commission assessing whether universities, polytechnics, colleges of education and other post-secondary institutions are meeting their statutory obligations under the law.
In a statement issued in Abuja, the Commission’s Head of Legal, Enforcement and Regulations, , said the exercise forms part of the agency’s mandate under the NDP Act 2023.
He emphasised the Commission’s commitment to safeguarding the rights and freedoms of citizens, particularly in relation to the processing of personal data, in line with constitutional provisions and the objectives of the Act.
Bamigboye noted that tertiary institutions process large volumes of personal data belonging to students, staff, alumni, research participants and other stakeholders, making strict compliance imperative.
According to him, Compliance Notices have been issued to selected institutions pursuant to relevant sections of the Act. The names of the affected institutions were published in national newspapers on February 19, 2026.
The institutions have been given 21 days from the date of the notice to submit required documentation, including evidence of filing their 2024 NDP Act Compliance Audit Returns, proof of appointment of a Data Protection Officer, a summary of technical and organisational measures adopted to protect personal data, and evidence of registration as a Data Controller or Processor of Major Importance.
The Commission warned that failure to comply may result in enforcement actions, including enforcement orders, administrative fines and possible criminal prosecution in accordance with the NDP Act 2023.
Meanwhile, the National Commissioner and Chief Executive Officer of the NDPC, , has approved the establishment of a regulatory clinic aimed at promoting a preventive approach to privacy risks and accelerating the correction of identified compliance gaps within the education sector.
