TikTok, Truecaller Face Sanction from NDPC Over Alleged Data Breaches The Nigeria Data Protection Commission (NDPC) reveals it is looking into TikTok and Truecaller over purported data privacy violations as portion of efforts to enforce compliance with the Nigeria Data Protection Act (NDPA).
This also trended:
Speaking during the press conference in Abuja on Thursday, Vincent Olatunji, the national commissioner and chief executive officer (CEO) of NDPC, reported the agency is dissecting the platforms’ compliance with data protection laws and would estimate necessary regulatory actions based on its findings.
“As we speak, we have even gone to the pitch of scrutinizing multinationals. We are currently probing TikTok and Truecaller in the area of data privacy,” Olatunji said.
“Depending on our findings, if they are able to go through remediation and do what is right, we are cheerful to work with them.”
The NDPC CEO noted revealed when the commission commenced monitoring data protection compliance, only 4 percent of organisations cohered to regulations.
He, however, stated through enlarged enforcement and stakeholder engagement, compliance levels have now excelled 55 percent.
Olatunji reported the NDPC emphasizes remediation over immediate sanctions, assessing data breaches based on their severity, the number of individuals affected, and the potential economic impact.
Instead of publicly reporting non-compliance, he stated the commission provides companies with clear corrective measures to address identified issues.
The commissioner annexed that organisations found in violation must keep comprehensive records of their data processing activities and rectify any lapses.
“Additionally, they are subject to monitoring for six months to a year to ensure full compliance,” he said.
Olatunji stated while the commission prefers a corrective approach, it will not hesitate to enforce stricter actions if necessary.
At the press conference, the NDPC likewise introduced the NDPA general application and implementation directive (NDP Act GAID), a regulatory framework designed to help data controllers and processors comply with the NDPA.
Olatunji revealed many organisations lack understanding of data protection regulations, often leading to inadvertent breaches.
The commissioner stated the NDP Act GAID addresses technical and organisational measures in the areas of data protection principles, lawful basis of data processing, NDP Act compliance audit, and data subject rights, amongst others.
He reported the directive, which will be available on the NDPC’s portal, intends to provide clarity and reinforce the role of data protection officers in ensuring compliance.
Category: World-News
Tag: TikTok Truecaller Face Sanction from NDPC Over Alleged Data Breaches
Written by Author
Published 3/21/2025