Hello.cv is a promoter of Cape Verde country code top level Domain (Cape Verde ccTLD) under the 3 Million Technical Talent programme.

It will be recalled that FMCIDE under the leadership of Dr. Bosun Tijani, recently announced a $10 million partnership agreement with Hello.cv.

According to the Minister, the deal will see Hello.cv providing 20,000 3MTT fellows access to the company’s profile package valued at $500 per fellow, comprising a personal .cv domain, an AI-powered job search agent, and a professional CV writer.

But stakeholders in the industry argue that mandating the 3MTT fellows to acquire a foreign domain (.cv) contravenes the provisions of the “Nigeria First Policy” and relegates the Nigeria’s country code Top Level Domain (CcTLD) and identity, .ng.

While applauding the initiative to partner with a foreign company to join the indigenous trainers and train 20,000 3MTT fellows, some of the stakeholders, suggested that the Federal Government should have agreed on the other provisions of the partnership, but give Nigeria Internet Registration Association (NiRA), the Registry for the .ng domain, the right to host the 3MTT fellows on .ng domain, in adherence to the “Nigeria Firs” policy.

Others say Hello.cv could be mandated to host the fellows on .ng with .cv as a secondary domain host, such as hello.cv.ng.

Speaking on the issue, Chief Executive Officer, DNS Africa Media and Communications, Dr. Adebunmi Adeola Akinbo said: “Okay, the first thing we want to understand is this, the number of people that will be onboarded to the .cv ccTLD is huge. Does .cv ccTLD have the policy to protect the privacy of Nigerian’s data? Even if they have, it is it proper, when we are talking about a government that says, “Nigeria First” as its priority? it is very improper, very, very improper.”

He further noted that the .ng domain name is a domain name that can easily accommodate such a huge number of proposed job seekers. “If they say their brand is a Hello.cv, no problem, they should come and buy a hello.cv.ng if the branding is a priority for them. If they decide that this becomes like a business opportunity, an entrepreneurial ground for them to grow upon, they can send a mail and propose that, and we can onboard three million Nigerians or five million Nigerians to the .ng domain name.”

Approved by the Federal Executive Council (FEC) on the May 5, 2025, the “Nigeria-First Policy Agenda” is an economic initiative that mandates all Federal Ministries, Departments, and Agencies (MDAs) to prioritize locally produced goods and services in government procurement.

Its primary goal is to reduce import dependency on foreign goods and services, stimulate domestic industries, and boost job creation.

Pundits note that the $10 million Agreement package with Hello.cv (the Cape Verde ccTLD) by FMCIDE which includes a .cv domain, an AI-powered job search agent, and professional CV writing assistance for each of the 20,000 3MTT fellows, will only cede these fellows to utilize a foreign country’s domain, rather than Nigeria’s indigenous domain thereby promoting another country’s digital identity.

They argue that providing a domain name, which is a country’s identity on the internet space, shouldn’t have been part of the agreement, especially since Nigeria has the Nigeria Internet Registration Association (NiRA), the custodian of .ng CcTLD.

NiRA is the registry for .ng Internet Domain Names and maintains the database of names registered in the .ng country code Top Level Domain.

Speaking on the partnership, Emmanuel Amos, CEO, Programos and Innovationbed-AI Academy boss,  noted that the activities of government has made Nigerians gradually loose trust in its policies, as there is no stability in execution and compliance by the same MDAs responsible for driving the goals and objectives of government.

“Nigeria seems to have lost the collective-will to allow any technology deliver real value for the ecosystem. We plan elections, invest in technology, and yet we often lack the institutional resolve to let that technology work effectively for us. We do not have that system-will for us to envision solutions and implement something right for our system.”

Dr. Akinbo had reiterated also:

“Don’t forget that recently, the FMCIDE held a conference on cybersecurity. Now, when we’re talking about cybersecurity, these are the things that we should always put at the front burner, to ensure that the .ng is always at the forefront, and every other domain is at the back end in order to protect Nigeria’s data.

He concluded by stating that as good as it may sound, leaving the .ng domain name out of this circle of engagement is wrong.

“Taking information or data outside the .ng domain name and outside the domain of the Federal Republic of Nigeria is also wrong, where Nigeria has neither control nor significant influence to control how and where the data is used. I hope that the people in charge will hear this and make amends. All these, just started going out last month, so there’s room for amendments, there’s room to make the change, and ensure Nigeria retains its digital value”

According to Ugonma Egwuatu of ECAM Global Services, an ICT and Data Protection firm, if a government Ministry has given the trainees the permission to use a foreign domain, then the attention of the Nigeria Data Protection Commission (NDPC) should be drawn to it.

The NDPC has subscription to .ng as requirement for its Data Protection Compliance Organisations (DPCOs).

The concern, she notes, is about the security of the data.

“We are talking about 20,000 data sources here, so NDPC should be concerned.”

“There should be explanations regarding the backend: what are they doing with the data of the people that visit the sites? What is the reason behind the use of foreign domain as against the .ng that we know about? Are they trying to phish data? Are they trying to sell data? These are questions that need to be asked to know the reason why the ministry insists on the trainees using a foreign domain.”

She suggested that there should be a third-party agreement.

“I want to believe that as a ministry, they have done their due diligence, because the security of people’s data is involved”, she said.

The findings also show strong support for regulation, with 83.4% backing restrictions on children’s access to social media.

The survey results were presented in Lagos during a roundtable on child online safety, organised in collaboration with the Nigeria Data Protection Commission (NDPC).

With 585 Nigerians taking part in the consultation, the survey examined risks, enforcement options and possible legal frameworks.

Among the group of respondents, 64.8% want outright regulation, while 18.6% prefer regulation tied to a different minimum age threshold.

Only 16.6% opposed regulation, while 51% said education and digital literacy should be prioritised instead, and 40% pointed to parental supervision tools as a better precaution.

Age preference also split responses, with 36.8% saying 16 years should be the minimum age for access, closely aligning with Australia’s recent approach. Another 27.7% preferred 17 years. A smaller share, 13%, supported the global platform standard for 13 years.

Harmful content emerged as the most reported risk, cited by 90.9% of respondents. Digital addiction followed at 83.6%, while 82.4% pointed to online grooming as a major threat.

The survey also found that 74.5% believe children and parents do not fully understand the legal consequences of cyber offences. Almost all respondents, 97.6%, supported a duty-of-care approach requiring platforms to take proactive steps against harm.

Communications Minister Bosun Tijani said the consultation reveals the pace of change in the digital space and the need for policy to keep up.

He said, “The debate should focus on implementing age restrictions effectively rather than questioning the need for such safeguards.

“Nigeria can deploy digital identity infrastructure and existing platform verification systems to strengthen enforcement of age-based social media regulations.

“The fact that some people may bypass regulations is not a reason for safeguards not to exist.”

Tijani added that social media still offers opportunities for learning and innovation, but children must remain protected from exploitation, harmful content and other risks.

He also said enforcement would require cooperation across government, parents, schools and technology platforms.

NDPC National Commissioner, Dr Vincent Olatunji, also spoke about the risks facing children online. He pointed to cyberbullying, cyberstalking, exposure to harmful content and mental health pressures as key issues.

He also mentioned that access to the internet is highly important for education and development, but protection measures must sit alongside that access. Olatunji described child online safety as a shared responsibility across government agencies, families, schools and platform operators.

The discussion encapsulates a global shift in children’s access to social media. Several countries have already introduced, or are moving towards, better age-based management.

Australia introduced a ban on social media access for children under 16 in December 2025, requiring platforms such as TikTok, Instagram and YouTube to restrict underage users. Indonesia has also announced plans for a similar restriction.

In Europe, Denmark is preparing to ban social media for children under 15. The Danish government secured backing from both coalition and opposition parties in November 2025. France passed a bill in January 2026 banning social media use for children under 15, with President Emmanuel Macron supporting the measure.

These developments show a policy trend where governments treat child online safety as a public concern that extends beyond regulation of content alone. In several cases, it now sits alongside debates on health, education and digital identity systems.

In Nigeria, the proposed direction indicates a combination of age restrictions and verification systems rather than a single enforcement model. Officials have pointed to digital identity infrastructure and platform-level verification tools as possible mechanisms.

The survey indicates strong public appetite for intervention, especially given the level of concern about exposure to harmful content, addiction and grooming risks. At the same time, a smaller but notable group continues to argue for education and parental oversight rather than formal restrictions.

The government says no final decision has been made, insisting that any policy will follow nationwide consultation before implementation.

Dr. Olatunji made the commitment while delivering a goodwill message at Tech Convergence 3.0, organised by the Nigeria Internet Registration Association (NiRA), under the theme: “Strengthening Nigeria’s Digital Independence: The Role of Policy, Digital Identity and .ng for Economic Growth.”

In his remarks, the NDPC boss commended NiRA for its achievements in promoting Nigeria’s country code top-level domain (.ng) and fostering the growth of the nation’s internet ecosystem.

He also highlighted the strong and productive relationship between the Commission and NiRA, noting that both organisations share a common vision of building a secure, trusted, and resilient digital economy.

Dr. Olatunji disclosed that one of the requirements for Data Protection Compliance Organisations (DPCOs) accredited by the Commission is the adoption of a .ng domain name, a move aimed at strengthening Nigeria’s digital identity and promoting local digital assets.

He reaffirmed the Commission’s readiness to deepen its collaboration with NiRA through initiatives that support data protection, digital trust, and national digital development.

“The future of Nigeria’s digital economy is closely tied to the strength of our digital identity,” Dr. Olatunji said. “At the Nigeria Data Protection Commission, we remain committed to supporting the development of a digital identity that Nigerians can proudly showcase globally while ensuring that privacy and data protection remain at the core of our digital transformation journey.”

As part of efforts to strengthen capacity within the internet ecosystem, the National Commissioner proposed data protection and privacy training programmes for NiRA registrars. According to him, the initiative forms part of the Commission’s contribution to the human capital development of stakeholders within the domain registration and internet governance space.

He noted that building a digitally skilled workforce is essential to safeguarding personal data, enhancing trust in digital services, and sustaining Nigeria’s growing digital economy.

The event attracted key stakeholders from government, the private sector, and the technology ecosystem.

Dignitaries in attendance included Senator Shuiab Afolabi Salisu, Chairman of the Senate Committee on ICT and Cybersecurity; Honourable Adedeji Stanley Olajide, Chairman of the House Committee on ICT and Cybersecurity; Professor Ibrahim Adeyanju, Managing Director/CEO of Galaxy Backbone; and Dr. Ibukun Odusote, Chairman of NiRA’s Board of Trustees, among others.

Tech Convergence 3.0 provided a platform for stakeholders to discuss policies and initiatives aimed at strengthening Nigeria’s digital sovereignty, promoting indigenous internet infrastructure, and accelerating the country’s digital economic growth.

Speaking during the signing of the MoU with the Bureau of Public Procurement, Dr Vincent Olatunji, the national commissioner/CEO, NDPC, commended the leadership of the BPP for prioritising privacy and data governance.

He stated:

“Data privacy is a global imperative for building trust, confidence, and credibility within the digital ecosystem. The NDPC remains committed to supporting the integration of robust data protection standards within Nigeria’s procurement sector.”

In his remarks, Dr Adebowale Adedokun, director-general of the BPP, reaffirmed the Bureau’s commitment to ethical data management and compliance with global best practices.

In his words:

“We recognise that the unlawful disclosure of government information is a criminal offence. As we embrace technology, there is a growing need to strengthen safeguards for the protection of sensitive information.”

As part of the collaboration, Dr Olatunji offered 50 Virtual Privacy Academy vouchers to BPP staff to support capacity development in data protection and privacy.

Dr Adedokun welcomed the initiative and proposed broader training opportunities for the Bureau’s 453 procurement officers nationwide.

In a related development, the NDPC also signed an MoU with the Nigeria Governors’ Forum (NGF) to deepen data protection and privacy at the state level.

Speaking at the signing ceremony, Dr Olatunji commended the leadership of the NGF for its readiness to partner with the Commission in advancing responsible data governance at the state level.

He said:

“Compliance with data protection obligations is critical to strengthening privacy frameworks across our states, thereby accelerating nationwide adoption, enhancing investor confidence, as well as foreign direct investment.”

Dr Abdulateef Shittu, director-general of the NGF, reaffirmed the Forum’s commitment to strengthening data protection and privacy across the states.

In his words:

“This partnership with the NDPC is a strategic step towards securing Nigeria’s digital ecosystem and advancing responsible data governance at the subnational level.”

To ensure effective implementation of both agreements, working groups were established by the NDPC with the BPP and the NGF respectively to develop actionable frameworks for swift implementation.

In a statement signed by Babatunde Bamigboye, the head, Legal, Enforcement & Regulations, NDPC said a recent technical assessments indicate that coordinated cyber operations by shadowy threat actors are targeting financial systems and other critical digital infrastructure in Nigeria, raising urgent concerns over data privacy, institutional resilience, and national cybersecurity.

The Commission reminded public institutions of the Presidential Directive by President Bola Ahmed Tinubu, which states:

“Data is the new oil; its value increases the more it is refined and responsibly shared. I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act 2023,” Bamigboye said.

In line with this directive, the NDPC has called on all Data Controllers and Data Processors, including Ministries, Departments and Agencies (MDAs), to urgently strengthen both technical and organisational safeguards to protect the personal data of Nigerians and other data subjects in compliance with the Nigeria Data Protection Act (NDP Act), 2023.

Recommended Immediate Actions

The Commission advised organisations to implement the following critical measures:

• Appointment of trained and certified Data Protection Officers
• Development and effective implementation of Privacy Policies and information security standards
• Conduct of Data Privacy Impact Assessments
• Deployment of robust identity and access controls, including Multi-Factor Authentication (MFA)
• Adoption of zero-trust security architecture and network segmentation
• Immediate remediation of system vulnerabilities and continuous patch management
• Protection of cloud infrastructure, APIs, databases, and access credentials
• Real-time monitoring, logging, and threat detection systems
• Encryption, key management, and secure credential handling
• Regular Vulnerability Assessment and Penetration Testing (VAPT) on critical systems
• Routine backup, recovery, and resilience testing

Regulatory Support and Compliance Warning

The NDPC stated that it is prepared to provide the necessary regulatory guidance and support to organisations seeking to improve their data protection posture.

However, the Commission warned that organisations that fail to implement adequate measures as required under the Nigeria Data Protection Act, 2023 may face legal liabilities and regulatory sanctions.

The Commission reaffirmed its commitment to safeguarding personal data, strengthening institutional resilience, and driving compliance across all sectors of the Nigerian economy.

This initiative is aimed at strengthening Nigeria’s collective cyber resilience and enhancing coordinated responses to evolving cyber threats across both the public and private sectors.

The Minister’s position underscores a broader policy direction centred on partnership and shared responsibility.

“Cybersecurity is a shared national responsibility. Protecting Nigeria’s digital economy requires strong partnerships, trusted collaboration, and collective vigilance across government, industry, and civil society. Through collaborative action and sustained engagement, we are strengthening Nigeria’s capacity to detect threats early, respond effectively, and build a resilient and trusted digital ecosystem.”

He further encouraged cross-sector participation, noting that stakeholders must help shape “a sustainable, partnership-led cybersecurity model capable of deterring cybercriminal activity and protecting citizens, businesses, and national digital infrastructure.”

In parallel, the Nigeria Data Protection Commission has confirmed that it is carrying out an ongoing investigation across the data protection ecosystem in line with its statutory mandate.

The statement signed by Babatunde Bamigboye, head, Legal, Enforcement & Regulations, NDPC read:

“The Nigeria Data Protection Commission (NDPC) is carrying out an investigation into an alleged data breach involving Remita Payment Services Ltd., Sterling Bank and other entities. In line with the Commission’s procedure, Notice of Investigation was duly served on the 1st of April, 2026. Relevant parties and individuals have been providing information for the purpose of addressing the incident.”

“The aim of the investigation is to ensure that data subjects are protected with appropriate technical and organisational measures. The investigation by NDPC covers, among others, the types of personal data involved, the nature and scope of the alleged breach, the risk to data subjects and the mitigation measures carried out where a breach is confirmed.”

“The Commission’s National Commissioner/CEO, Dr Vincent Olatunji, has directed that organisations that employ digital payment systems without putting in place appropriate technical and organisational measures as mandated under the Nigeria Data Protection Act, 2023 (NDP Act), will also be examined as part of a wider effort to ensure the integrity of the ecosystem.”

The commission said it had received reports of individuals taking pictures and recording videos of unsuspecting members of the public and sharing them on social media.

According to the regulator, such actions violate the privacy rights of citizens protected under Section 37 of the 1999 Constitution of the Federal Republic of Nigeria and the Nigeria Data Protection Act, 2023.

Officials pointed to a recent case involving a content creator who stands by the roadside in Lagos and records members of the public as part of what she describes as a “reality show”.

The commission stated that using people’s images in that way requires consent unless the creator can clearly justify it under other lawful grounds for processing personal data.

Preliminary checks by the NDPC found that the activity amounts to a deliberate invasion of citizens’ privacy. The commission said the recordings do not serve a public interest or any legitimate purpose.

It also noted that those being filmed do not expect their images to be captured and shared online by a stranger.

Following the development, the National Commissioner and Chief Executive Officer of the NDPC, Vincent Olatunji, directed major social media platforms to strengthen enforcement of their community rules.

Platforms mentioned include TikTok, X (formerly Twitter) and Meta Platforms.

The commission said these companies must act quickly when harmful content appears on their platforms. If they fail to respond on time, the regulator warned that it may impose sanctions under the Nigeria Data Protection Act.

The NDPC also reminded content creators that they are responsible for what they publish online. According to the commission, anyone who violates the privacy rights of citizens may face legal consequences, including criminal prosecution.

In a statement on Tuesday, the commission said it endorsed the “Joint Statement on AI-Generated Imagery and the Protection of Privacy”, a document coordinated by the International Enforcement Cooperation Working Group of the Global Privacy Assembly.

The statement highlights concerns over tools that can create realistic images and videos of identifiable people. Regulators say such tools are being misused to produce non-consensual images, defamatory materials and other harmful content. Children and other vulnerable groups face the greatest risk.

According to the NDPC, the initiative with data authorities urges organisations to put safeguards in place before deploying such systems. It also asks companies to be transparent about how their tools work, set up effective content removal channels and comply with data protection laws in their countries.

AI tools are now widely accessible, and in many cases, they can generate images that look real within seconds. When those images feature real people, the privacy impact is immediate.

The commission said its participation reveals Nigeria’s ongoing efforts to promote responsible use of artificial intelligence, referring to steps already taken at home, including work on a national policy framework.

The Minister of Communications, Innovation and Digital Economy, Dr Bosun Tijani, previously led the development of Nigeria’s National AI Strategy.

In addition, the NDPC issued its General Application and Implementation Directive (GAID), which requires data controllers and processors to embed privacy protections into their systems from the design stage.

The National Commissioner and Chief Executive Officer of the NDPC, Dr Vincent Olatunji, has now directed that Compliance Audit Returns under the Nigeria Data Protection Act will be used to assess how major data controllers and processors apply AI in their operations.

The commission said the audit process will serve as a benchmark for monitoring responsible data processing practices, especially where AI tools are involved.

This was the highlight of a strategic courtesy visit by the NCS leadership, led by Professor Muhammad Sirajo Aliyu, the national president, to the NDPC headquarters in Abuja.

The partnership comes at a critical time as the Commission ramps up efforts to enforce the Nigeria Data Protection Act (NDP Act) 2023, while the NCS continues its push for IT professional excellence and capacity building in both the public and private sectors.

​Deepening Industry Ties

During the meeting, Professor Aliyu lauded Dr. Vincent Olatunji, the National Commissioner/CEO of the NDPC, for his long-standing commitment to the NCS and the broader IT ecosystem.

He emphasized that the visit was aimed at strengthening the synergy between the two bodies, particularly in the areas of policy advocacy and the execution of flagship industry programs.​

Aliyu noted that the NCS is prepared to leverage its nationwide network of IT professionals to support the NDPC’s mandate of safeguarding the personal data of Nigerians.

Policy vs. Implementation

Responding to the delegation, Dr. Olatunji underscored the indispensable role of the private sector in driving government policies.

According to him, while the NDPC provides the regulatory framework and policies, professional associations like the NCS serve as the “engine room” that drives implementation through awareness and capacity building.

​“Awareness is a key component of our mandate,” Olatunji stated. “We are committed to strengthening this relationship because the success of data protection in Nigeria relies heavily on the expertise and reach of IT professionals.”

​Expanding the Tech Ecosystem​

In a move to foster greater inclusivity within the Nigerian tech space, Dr. Olatunji advised the NCS leadership to review its membership criteria.

He suggested that the society should open its doors to non-conventional tech players, individuals who may not have a formal degree in Computer Science but are actively driving innovation and value within the digital ecosystem.​

He noted that expanding the membership to include these practitioners would provide the NCS with a more diverse and robust footprint across both the public and private sectors, reflecting the multidisciplinary nature of modern technology.​

The NDPC has recently been aggressive in its partnership drive, having recently signed an MoU with the NCC and partnered with the NYSC to train 3,700 Corps members as certified Data Protection Officers (DPOs).

Since the signing of the Nigeria Data Protection Act in 2023, the NDPC has focused on creating a compliance culture among Nigeria’s estimated 500,000 data processors and controllers.

​As the umbrella organization for all IT professionals in Nigeria, the NCS remains a primary stakeholder in the country’s journey toward a $1 trillion economy by 2030, a goal heavily reliant on digital infrastructure and data security.

The engagement, which brought together media partners covering technology, business, and governance, was aimed at strengthening journalists’ understanding of Nigeria’s evolving data protection and privacy ecosystem, in order to improve the quality, accuracy, and responsibility of reporting on data-related issues.

Speaking virtually at the event, Dr Vincent Olatunji, the national commissioner and chief executive officer of the NDPC, commended the media for its sustained support in advancing public awareness of data protection and privacy, describing the press as a critical stakeholder in the Commission’s mandate.

NDPC at the training session:

Olatunji emphasised the growing economic and social importance of data protection in Nigeria, noting that effective regulation is not only about safeguarding citizens’ rights but also about enabling trust in the digital economy.

He highlighted key milestones recorded by the Commission since its establishment, including the creation of approximately 23,000 jobs and the expansion of a data protection ecosystem now valued at about ₦16.2 billion.

According to him, these gains underscore the sector’s rising contribution to national economic growth, particularly as businesses, public institutions, and digital service providers increasingly prioritise data compliance and privacy safeguards.

The NDPC boss also disclosed that the Commission was named the Most Outstanding Data Protection Authority at the Picasso Awards last year, a recognition he said reflects its growing credibility and impact both locally and internationally.

He urged journalists to continue supporting the Commission’s efforts through informed reporting and sustained public engagement.

The capacity-building session exposed participants to core concepts underpinning data protection and privacy regulation, including the principles of personal data processing, lawful bases for data processing, and the regulatory considerations surrounding cross-border data transfers.

Other discussions focused on emerging privacy risks, compliance obligations for organisations, and the media’s role in shaping public understanding of data rights.

Organisers said the workshop forms part of the NDPC’s broader strategy to deepen stakeholder collaboration and build institutional capacity across sectors, as Nigeria positions itself as a trusted digital economy under the Nigeria Data Protection Act.

Industry observers say the initiative highlights the increasing intersection between data governance, media responsibility, and economic development, particularly at a time when digital technologies are reshaping business models and public services across the country.