Follow Us on Google
From Adanna Nnamani, Abuja
The Nigeria Data Protection Commission (NDPC) has developed sector-specific data protection and privacy regulatory frameworks for the financial, telecommunications and hospitality industries as part of efforts to strengthen data governance and safeguard the personal information of millions of Nigerians.
The National Commissioner of the NDPC, Dr Vincent Olatunji, disclosed this on Thursday in Abuja during a stakeholders’ engagement meeting convened to review and refine the proposed frameworks. The meeting brought together representatives from the three sectors to provide insights, share experiences and contribute to the development of regulations that align with global data protection and privacy standards.
Speaking at the event, Olatunji said the frameworks were designed to address the unique data processing practices of each sector while ensuring compliance with Nigeria’s data protection laws.According to him, issues such as data privacy policies, data protection impact assessments and records of processing activities vary across industries and require tailored regulatory approaches. “We want stakeholders from the different sectors here today to speak to the kind of data they collect. We need to know what they expect from us to cover in terms of having a framework that guarantees trust in their data processing activities, and also to guide them through compliance, which is really important,” he said. Olatunji noted that the financial sector remains one of the country’s most strategic industries from a data protection perspective, with traditional banks serving more than 60 million Nigerians and digital banks controlling the data of over 40 million customers. He added that the hospitality and telecommunications sectors also process enormous volumes of personal information, making it imperative for regulators to establish clear guidelines for responsible data management.
The Head of Legal and Regulatory Enforcement at the NDPC, Mr Babatunde Bamigboye, said the initiative forms part of the commission’s broader efforts to protect privacy rights and other fundamental freedoms guaranteed under the law.
He explained that extensive consultations had already been conducted to inform the frameworks.
“In the last few weeks, we have carried out over 15 desk reviews and focus group discussions. We have also evaluated over 40,000 data controllers and data processors of major importance through compliance audit returns and registration filings submitted to the commission,” he said.
Bamigboye stated that findings from the reviews highlighted the need for sector-specific regulatory instruments capable of addressing the unique challenges faced by different industries.
Other News
According to him, the frameworks will provide guidance on key issues including data protection principles, lawful bases for processing personal data, data subject rights, cross-border data transfers, binding corporate rules and codes of conduct.
Speaking on the proposed Hospitality Data Protection Framework, Chairman of Consultancy Support Services, Mr Abdul-Hakeem Ajijola, said the hospitality industry has evolved into a major data ecosystem due to increasing digital interactions between businesses and customers.
He explained that personal information is collected throughout the customer journey, from online reservations and transportation bookings to digital payments and post-service reviews.
“Hospitality is no longer just about rooms and food, but about data,” Ajijola said, adding that the sector is estimated to process between 150 million and 300 million interaction-level records annually.
He noted that the framework recognises the movement of personal data across multiple organisations, platforms and technologies and therefore establishes clear responsibilities throughout the hospitality value chain.
Also speaking, the Chief Executive Officer of Management Edge Limited, Mr Rex Abitogun, said the telecommunications framework was necessary because of the sector’s unique data environment.
He explained that the proposed regulations would guide mobile network operators, infrastructure providers, internet service providers and other organisations that rely on telecommunications infrastructure to deliver services.
“The framework will guide those people that operate in the telecom sector, wire service providers, mobile networks, infrastructure providers, as well as other people that ride on telecom services or infrastructure to offer service,” he said.
