ABUJA, Nigeria – The Nigeria Data Protection Commission (NDPC) has launched investigations into global platforms such as Truecaller and TikTok regarding their handling of Nigerian citizens’ personal data.
This move comes as part of the NDPC’s broader efforts to enforce the nation’s data protection laws, especially concerning cross-border data transfers and the security of sensitive information.
Dr. Vincent Olatunji, the National Commissioner of the NDPC, made the announcement on Thursday, April 17, 2025, during a working visit to the Coordinating Minister of Health and Social Welfare, Professor Ali Pate, in Abuja.
During their meeting, the two parties discussed strategies for improving data protection in Nigeria’s healthcare sector, which has become a primary focus for the commission.
Olatunji explained that Nigeria’s data protection law, the Nigeria Data Protection Act (NDP Act) 2023, covers both local and international entities that handle the personal data of Nigerian citizens.
He emphasized that the law applies even to foreign companies processing data about Nigerians, citing the ongoing investigations into Truecaller and TikTok.
“If you reside in Nigeria and process Nigerian data, you are within scope. Even if you are outside Nigeria, once you process the data of Nigerians, you are within scope,” Olatunji stated.
He also highlighted the law’s provisions on cross-border data transfers, which require foreign jurisdictions to provide a similar level of protection for Nigerian data.
This marks a critical development in Nigeria’s push to safeguard personal data and ensure privacy standards align with global best practices.
In particular, the NDPC’s actions focus on emerging concerns in the healthcare sector, where the protection of sensitive medical records is vital to prevent misuse that could lead to discrimination, misdiagnosis, or even fatalities.
A key part of the discussions between the NDPC and the Ministry of Health involved the creation of stronger systems to protect patient information.
Olatunji stressed the urgency of safeguarding personal health data, noting that improper handling could lead to severe consequences.
“This sector is generally sensitive, and the kind of information collected has to do with medical records which could be used to discriminate against anyone seeking to have good healthcare,” he said.
Pate acknowledged the significant volume of data collected by healthcare facilities, including both personal health details and demographic information, which underscores the necessity of robust data protection systems.
He expressed support for the NDPC’s initiatives, committing to ensuring compliance across the 107 health institutions affiliated with the ministry.
