Public NDPC signals, with sources.
A sourced view of public enforcement signals, audit-return context, and the remediation patterns Nigerian teams should turn into evidence.
Recent
Public signals worth tracking.
| Date | Authority | Action | Severity | Status | Source |
|---|---|---|---|---|---|
| Aug 2024 | NDPC | Fidelity Bank fine reported at ₦555.8m for alleged data privacy violations | high | Public report | TheCable |
| 2024 | NDPC | Annual Report outlines audit-return compliance, complaints, investigations, and enforcement activity | high | Regulator report | NDPC |
| 2024 | NDPC | Compliance Audit Return filing remains a recurring accountability requirement | med | Guidance signal | NDPC |
| Ongoing | NDPA | Privacy notices, lawful basis records, DSR handling, and audit evidence remain buyer-visible risks | med | Operational lesson | Asiri guide |
| Ongoing | NDPA | Default notices and remediation letters should be tracked with owners, evidence, and dates | med | Operational lesson | Default-notice playbook |
Patterns
What the NDPC keeps fining for.
Unconsented marketing
Bought lists, pre-ticked boxes, missing preference centers.
Stale RoPA
Spreadsheets the team hasn’t touched in a year.
Cross-border misses
Vendor moved residency without updating SCCs.