“We noticed that the level of awareness among the Nigerian population was very low,” he says, noting that many Nigerians routinely share sensitive information such as names, telephone numbers, residential addresses, bank account details and passport information without fully understanding the implications.

According to him, Nigeria currently has more than 10,000 major data controllers and processors, creating increasing demand for skilled professionals capable of supporting compliance with the Nigeria Data Protection Act (NDPA) 2023.

The NDPC CEO says the Commission has helped create more than 27,000 jobs within Nigeria’s emerging data protection ecosystem.

NDPC expands data privacy workforce pipeline

The newly-launched Virtual Privacy Academy represents the next phase of the Commission’s nationwide capacity-building strategy.

Designed as a self-paced, Nollywood-themed digital learning platform, the academy enables users to learn about data privacy and protection remotely, extending learning opportunities beyond traditional classroom and industrial training programmes.

“The next phase is the Virtual Privacy Academy,” Olatunji says, describing it as a time-saving platform that allows participants to continue learning beyond physical training sessions.

According to him, more than 60,000 people have already been onboarded onto the platform as the Commission scales privacy education across Nigeria.

The initiative builds on NDPC’s broader awareness campaign aimed at addressing shortages in data protection expertise while equipping organisations with the skills required to comply with Nigeria’s evolving privacy regulations.

Olatunji says the Commission has also domesticated professional certification programmes, with about 1,500 Data Protection Officers (DPOs) already certified.

The Commission is further expanding its Digital Privacy Awareness Campaign across tertiary institutions and establishing privacy clubs to educate students about their privacy rights while encouraging careers in data protection.

“This is an ecosystem where professionals are being looked at all over the world,” Olatunji says. “They are looking for data protection professionals all over the world.”

Digital trust critical to Nigeria’s economy

According to the NDPC boss, building trust in Nigeria’s digital economy begins with ensuring that citizens are confident that their personal information is adequately protected.

“Today,” Olatunji says, “it is your right to ensure that whoever collects and processes your data puts in place appropriate measures in terms of technical measures, in terms of organisational measures to ensure that your data is always protected.” 

The NDPC chief notes that awareness and human capital development remain central to the Commission’s strategy after identifying low levels of public awareness regarding privacy rights.

“We noticed that the level of awareness among the Nigerian population was very low,” he says, noting that many Nigerians routinely share sensitive information such as names, telephone numbers, residential addresses, bank account details and passport information without fully understanding the implications.

Olatunji warns that cyber threats have become increasingly sophisticated, with digital security now playing a central role in national security. “National security is now a digital security matter. Wars are not fought physically anymore. Wars are fought digitally, online,” he says.

NDPC records thousands of cyber attacks weekly

Beyond awareness, the Commission is increasingly positioning data protection as a critical component of Nigeria’s cybersecurity architecture.

Olatunji warns that cyber threats have become increasingly sophisticated, with digital security now playing a central role in national security.

“National security is now a digital security matter. Wars are not fought physically anymore. Wars are fought digitally, online,” he says.

The NDPC itself experiences persistent cyber threats, according to Olatunji, who reveals that the Commission records more than 4,000 attempted cyber attacks on its network in a single week.

He also links strong privacy and data governance frameworks to economic competitiveness, saying countries with credible data protection regimes are increasingly better positioned to attract foreign investment and participate in the global digital economy.

“A lot of foreign investors are looking for organisations to have the data protection law and an independent data protection authority,” he says.

Olatunji urges organisations to view privacy compliance not merely as a legal obligation but as a strategic business enabler capable of strengthening customer trust, supporting innovation and driving economic growth.

“The next phase is to strengthen awareness and accountability across all sectors. By doing so, we will strengthen trust, enable innovation, drive economic growth, and secure the future of the digital economy,” he says.

Established under the Nigeria Data Protection Act (NDPA) 2023, the NDPC has since expanded enforcement activities, issued implementation guidelines and licensed Data Protection Compliance Organisations (DPCOs) as part of efforts to strengthen Nigeria’s data protection regime.

The commission was also recognised in the Institutional Recognition Category of the 50 Most Influential Figures in Nigeria’s Digital Economy at WACC 2026, NDPC adds.