No fewer than eight African countries are currently understudying the Nigeria data protection ecosystem, it was gathered yesterday.

The Nigeria Data Protection Commission (NDPC) has received delegation from the countries to share regulatory experience, institutional frameworks, and practical lessons in establishing and operating effective data protection authorities in their respective countries.

The Somalian Data Protection Authority came on July 23, 2025, Uganda Data Protection Authority came on August 5, 2025.

Others are Botswana, Kingdom of Eswatini, Mozambique, Sierra Leone, Tanzania and The Gambia.

The NDPC in a statement said President Bola Tinubu signed the 2023 Data Protection Act into law thus paving the way for opportunities, expansion of the ecosystem, and ensured that regulatory and supervisory functions take the front stage.

Its CEO/National Commissioner, Dr Vincent Olatunji, said data protection and privacy policy of Nigeria would lead and provide guidance for other agencies in Africa, and the West Africa sub region.

Dr Olatunji who is the pioneer CEO of the Commission ensured that data protection and privacy ecosystem started to attract attention, investments and provided information and awareness on data privacy to data subjects and custodians of citizen’s data. Banks, educational institutions, hospitals, insurance companies, telecommunications companies and other industry players are kept on their toes. Some institutions were also sanctioned for data breaches. The online platforms were also sanitised on data protection and privacy.

It was gathered that following the implementation of the Act and the regulatory oversights provided by the Commission, Nigeria became a centre of attraction for other countries.

It was learnt that within two years, no fewer than eight countries began to understudy Nigeria data protection and privacy ecosystem in order to replicate same methodology in their respective countries.

Our Correspondent gathered that Nigeria ensured the Domestication of Data Protection Officers’ Certification to enhance competence within the ecosystem. This localisation also reduced pressure on the naira by limiting the need to purchase foreign currency for international certification. Over 500 Data Protection Officers received international Certification.

The NDPC certification significantly expanded Nigeria’s pool of qualified privacy professionals and supporting the effective implementation of the Nigeria Data Protection Act across sectors. Also within the period under review, Nigeria hosted the Network of African Data Protection Authorities, (NADPA) Conference and Annual General Meeting.

The conference helped significantly to promote continental cooperation, knowledge exchange, and alignment of data protection regulatory frameworks among African data regulators.

Through the initiatives of Dr Olatunji, the Virtual Privacy Academy (VPA) was established. The VPA is currently helping to expand privacy education, creating awareness across all sectors and ensuring that data subjects are seen as critical stakeholders, and treated as such.

The VPA is a Nollywood-styled initiative tailored to deliver structured online training, awareness programmes, and professional development courses to build data protection capacity.

Concerning the implementation of the Act’s General Application and Implementation Directive, the Commission issued the NDP-Act GAID to provide regulatory clarity, operational guidance, and enforceable standards for compliance with the Nigeria Data Protection Act.

Also the NDP Act was translated into three Local Languages to enhance public awareness, ensure inclusion of all and sundry within the ecosystem.

“To deepen public awareness and inclusion, the Commission translated the Nigeria Data Protection Act into the three major local languages (Hausa, Igbo and Yoruba) to improve accessibility and understanding of data protection rights among Nigerians,” said Mr Itunu Dosekun, the Head of Corporate Communications and Media of the NDPC.

Itunu said the Commission also conducted targeted capacity-building programmes for Ministries, Departments, and Agencies (MDAs) to enhance institutional compliance, data governance practices, and the responsible handling of citizens’ personal data.

He added that in recognition of sterling achievements of the present leadership of the NDPC, the Commission received multiple recognitions, including Outstanding Data Protection Authority of the Year at the Picasso Awards Africa, affirming its leadership, regulatory impact, and commitment to data protection excellence.