In a statement on Tuesday, the commission said it endorsed the “Joint Statement on AI-Generated Imagery and the Protection of Privacy”, a document coordinated by the International Enforcement Cooperation Working Group of the Global Privacy Assembly.

The statement highlights concerns over tools that can create realistic images and videos of identifiable people. Regulators say such tools are being misused to produce non-consensual images, defamatory materials and other harmful content. Children and other vulnerable groups face the greatest risk.

According to the NDPC, the initiative with data authorities urges organisations to put safeguards in place before deploying such systems. It also asks companies to be transparent about how their tools work, set up effective content removal channels and comply with data protection laws in their countries.

AI tools are now widely accessible, and in many cases, they can generate images that look real within seconds. When those images feature real people, the privacy impact is immediate.

The commission said its participation reveals Nigeria’s ongoing efforts to promote responsible use of artificial intelligence, referring to steps already taken at home, including work on a national policy framework.

The Minister of Communications, Innovation and Digital Economy, Dr Bosun Tijani, previously led the development of Nigeria’s National AI Strategy.

In addition, the NDPC issued its General Application and Implementation Directive (GAID), which requires data controllers and processors to embed privacy protections into their systems from the design stage.

The National Commissioner and Chief Executive Officer of the NDPC, Dr Vincent Olatunji, has now directed that Compliance Audit Returns under the Nigeria Data Protection Act will be used to assess how major data controllers and processors apply AI in their operations.

The commission said the audit process will serve as a benchmark for monitoring responsible data processing practices, especially where AI tools are involved.

This initiative, the first of its kind in the country, is aimed at professionals across sectors and shows a sharpened focus on regulation as the economy becomes more digitised.

The launch, which coincided with the 8th annual conference of the Network of African Data Protection Authorities (NADPA) in Abuja, was led by Dr Bosun Tijani, minister of Communications, Innovation and Digital Economy. He wasted no time in stressing the weight of the move.

“As we digitise government services, open up digital trade corridors, and scale digital identity platforms, data becomes the backbone and data protection, the shield,” he said during the event.

From where we stand, this academy is a response to a reality where data breaches, identity theft, and privacy violations are no longer rare headlines but daily threats. 

The Nigeria Virtual Privacy Academy brings practical, accessible training on cybersecurity and data governance for everyone—from government workers to young tech professionals. The idea is to build digital resilience through knowledge, not just laws.

Vice President Kashim Shettima, represented at the event by Senator Ibrahim Hadejia, noted that the Federal Government views data not merely as code or numbers, but as something deeply human. “Data is more than just a digital asset,” he said. “It is a human story told in numbers.”

Nigeria has gone beyond just trying to keep up with international best practices, it’s now attempting to create a regulatory system that matches the velocity of technological change.

To this end, the Vice President pointed to several milestones. He recalled how President Tinubu, only two weeks into office, signed the Nigeria Data Protection Act into law.

This was followed by Nigeria’s endorsement of the Malabo Convention on Cybersecurity and Personal Data Protection earlier this year. The General Application Implementation Directive for the Act also came into effect just two months ago.

“Our data protection ecosystem is now directly tied to the delivery of the eight presidential priorities of this administration,” Shettima noted.

Beyond national borders, Nigeria is pushing for a continent-wide alignment. The Chairperson of NADPA, represented by Vice President Immaculate Kassiat, called for shared standards across African countries, emphasising the urgency of regional cooperation in an era where data knows no boundaries.

On his part, Dr Vincent Olatunji, national nommissioner of the Nigeria Data Protection Commission (NDPC), offered insight into what has already been achieved.

The numbers were telling; over 5,000 compliance assessments, 223 investigations, 12 organisational remediations, and upwards of $1.2 million generated in regulatory fees in just two years.

“We’ve signed MOUs with data protection authorities across Africa and are creating a regulatory environment that encourages innovation while safeguarding citizens,” Olatunji said.

Still, he warned, not every African nation has caught up. Many countries on the continent remain without concrete data protection laws, a vacuum he believes could weaken Africa’s digital future.

“Strong data protection frameworks are not barriers to innovation, but enablers of a resilient and inclusive digital economy.”

The conference, themed “Balancing Innovation in Africa: Data Protection and Privacy in Emerging Technologies,” convened more than 30 African nations, with international observers from Europe, the Middle East, Asia, and the United States.

It was a mix of public declarations and backroom strategy—an attempt to shape how the continent handles one of its most valuable currencies: data.

Inga Stefanowicz, speaking on behalf of the European Union, reiterated the EU’s support for Africa’s evolving data governance ecosystem. And while partnerships are welcome, the message from Nigerian officials stressed that we can’t afford to wait for global consensus to protect what’s already ours.

With the academy now live and the NDPC expanding its reach, Nigeria is now increasing focus on a sector usually overlooked until something goes wrong. This reiterates that digital trust is not optional, but built into the code.

During the signing ceremony, Engr. Ayodele Olawande, minister of State for Youth Development, commended the initiative, along with the opportunities being created for jobs and wealth creation by NDPC under the leadership of the National Commissioner/CEO, Dr Vincent Olatunji. 

“No less than 80% of human capital development under the administration of the President is targeted at youths and this initiative is aimed at equipping 5,000 youths with the requisite technical skills for new jobs in the data protection ecosystem,” the Minister said.

While explaining the importance of the training, Dr Olatunji emphasized the importance of building trust and confidence as Nigeria repositions her economy to attract foreign direct investment. 

“Investors will be eager to do business in Nigeria if we are able to demonstrate accountability in relation to their data assets. There are at least 500,000 data controllers in Nigeria who are required to have at least one data protection officer each. Nigerian youths now have a great opportunity to become professionals to take up the estimated 500,000 new jobs in the ecosystem.

“In addition, we are also making sure that the subsequent certification will not be a burden on our foreign exchange. We have already licensed an in-country certification body that will issue globally recognized certificates to eligible trainees.” Dr. Olatunji stated.

On his part, the Permanent Secretary, Federal Ministry of Youth Development, Mr. Olubunmi Olusanya, lauded NDPC for its quest for data privacy and protection and asserted the preparedness of the Ministry to set the necessary machinery in motion in order to make the collaboration a success.   

The sanctions, announced by the National Commissioner Dr Vincent Olatunji, are part of an initiative to enforce the Nigeria Data Protection Act 2023 and safeguard personal information.

The NDPC’s action targeted four major banks and three additional institutions, penalized for breaches of data protection regulations. Dr Olatunji noted that these measures are in line with the government’s goal to maintain strict data protection standards.

Since the implementation of the Nigeria Data Protection Act 2023, the NDPC has conducted over 1,000 investigations across various sectors, including financial services, education, insurance, and consultancy. 

Of these, approximately 400 cases involved digital lending companies, often referred to as loan sharks. These investigations bring to light the widespread issues in data handling practices across multiple industries.

Dr Olatunji spoke on a noteworthy improvement in compliance with data protection laws, and private sector adherence rising from 49% to over 55%, while public sector compliance increased from 4% to 15%. This progress is attributed to the NDPC’s ongoing works to promote awareness and enforce regulations rigorously.

During a recent session with journalists in Abuja, marking the first anniversary of the Nigeria Data Protection Commission Act, Dr Olatunji reiterated the NDPC’s focus on protecting citizens’ data. He highlighted that the agency’s efforts are pointed towards creating a secure data ecosystem, now valued at over N10 billion.

The NDPC has also announced plans to hold chief executives of government ministries, departments, and agencies accountable for any data breaches under their jurisdiction. This policy aims to ensure that public sector entities adhere to the same standards expected of private companies.

The NDPC continues to investigate high-profile cases involving major companies such as Zenith Bank, GTB, Fidelity, Leadway Insurance, Babcock University, Opay, Meta, and DHL, all in a bid to enhance data protection and global best practices.

The commission, in its recently released 2023 Annual Report, noted the overly intrusive nature of these loan apps, which often gain access to users’ contacts, photos, messages, and other personal data, flouting fundamental principles of data protection and privacy.

Despite Google’s April 2023 policy aimed at curbing such breaches by restricting loan apps’ access to photos and contacts, the illicit practice continues, prompting the NDPC to intensify its efforts. 

Users report that lenders resort to tagging them as criminals and reaching out to contacts after defaulting on loan repayments.

Recognizing the systemic nature of these breaches, the NDPC is pursuing a multifaceted approach, collaborating with other regulatory bodies and third-party platforms utilized by these lenders. 

The commission is spearheading the development of the Nigeria Data Protection Act-General Application and Implementation Directive, which aims to tackle data breaches and enforce data ethics and privacy standards.

The NDPC is actively engaged in a joint effort with regulatory partners through the Joint Enforcement and Regulatory Taskforce to cleanse the digital lending sector of unethical practices. 

In a bid to enhance oversight, the Federal Competition and Consumer Protection Commission now mandates lending entities to secure data protection clearance from the NDPC before commencing operations.

These regulatory interventions come in response to mounting complaints and grievances from consumers, with Citizens’ Gavel, a consumer rights organization, lodging a formal complaint with the FCCPC against 30 unlicensed digital money lenders accused of employing coercive and illegal tactics to extract debts, including defamation and cyberbullying.

In the midst of these challenges, the NDPC is focused on bolstering privacy safeguards and ensuring stringent enforcement mechanisms to hold violators accountable. 

Stakeholders anticipate comprehensive regulatory measures to rein in rogue digital lending practices and safeguard the privacy and rights of Nigerian consumers.

The visit afforded the two organizations the opportunity to discuss areas of mutual cooperation between the State and the Commission.

Among the key areas of cooperation discussed at the meeting included Citizens’ Awareness, where both organizations are looking at raising public consciousness around Data Protection and ensuring Data privacy for citizens, so as to reduce the scourge of hacking, identity theft and other ills that currently make online and offline presence a challenge in the country.

Both executives also discussed the importance of Capacity Building in order to get more more people trained on data protection as well as the need for public and private institutions in the state to engage the services of Data Protection Officers, DPOs, in compliance and monitoring, in line with the provisions of the Act establishing the NDPC and the Nigeria Data Protection Regulation, NDPR.

Both organizations are also looking to create new job openings and employment opportunities in areas such as Data Protection Officers (DPOs), Compliance Officers among others, as an initiative towards Youth Empowerment. This they envisaged, will enable the youths be better informed and empowered to setup innovative business around data protection and management.

In his remarks, the Managing Director of Anambra State ICT Agency noted that data is the new oil, because of its strategic importance to planning across critical spheres of the economy.

He said, having underscored this, Mr Governor, Prof Charles Chukwuma Soludo, CFR has committed to accurate data sourcing and the protection of data, especially personal data, as an insurance that will enhance the prosperity of Ndi Anambra on the short run, as well as ensure that on a long run, more businesses flourish in the state.

According to CFA, the visit is to explore possible avenues of collaboration that will yield in accurate data sourcing for the state, which will in turn, prove resourceful for the Commission in national planning.

In his response, the NDPC National Commissioner, Dr Olatunji promised to support Anambra State through the ICT Agency, in its plan to make the state a technology-driven state.

Highpoint of the visit was the presentation of a copy of the Data Protection Act – 2023 to the MD/CEO of the Anambra ICT Agency by the NDPC National Commissioner, who was too excited to partner with the State.