NDPC Records 1,500 Cyberattacks, Exposes Nigeria’s Data Protection Gaps
The National Data Protection Commission (NDPC) says it recorded over 1,500 cyberattack attempts within a short period.
The National Commissioner of NDPC, Dr Vincent Olatunji, said this in an interview with the News Agency of Nigeria (NAN) on the sidelines of a data protection training programme in Lagos.
Olatunji said the situation forced a temporary shutdown of the commission’s network, and highlighted critical gaps in Nigeria’s data protection ecosystem.
He said the temporary shut down by NDPC was a security measure; a preventive measure to stop the hackers from succeeding.
Olatunji said cyber threats had become persistent and increasingly sophisticated, requiring organisations to adopt proactive and continuous security measures.
“Cyberattacks are no longer occasional; they are constant. Organisations must monitor their systems round the clock and remain up to date with security protocols,” he said.
He said that the shortage of qualified Data Protection Officers (DPOs) remained a major challenge, leaving many organisations without adequate capacity to safeguard sensitive information.
According to him, the Nigeria Data Protection Act mandates organisations to engage DPOs, creating growing demand for certified professionals.
“There is a significant gap between demand and supply of skilled personnel.
“This training is designed to prepare participants, not just for certification, but to fill that gap effectively,” he said.
Olatunji said that Nigeria’s data protection ecosystem had recorded notable growth under a Public-Private Partnership (PPP) model, generating over 10 million dollars in value.
He said that it had also generated more than seven billion Naira in government revenue through fees and fines.
“Beyond revenue, it has strengthened Nigeria’s global reputation and boosted investor confidence in how data is managed and protected,” he said.
On ransomware attacks, Olatunji cautioned organisations against paying ransoms, stressing that prevention remained the most effective strategy.
“Once you pay, you empower attackers. The focus should be on strengthening systems to prevent breaches,” he said.
Also speaking, a facilitator, Dr Taiwo Oyeleye, said the training would equip participants with both theoretical and practical knowledge of data protection and privacy.
“They will gain a clear understanding of data protection principles, organisational frameworks and technical safeguards required to secure sensitive information,” he said.
Oyeleye expressed confidence that participants would help bridge existing awareness and capacity gaps across sectors.
Another facilities, Mr Wole Jacobs, called for stronger collaboration between the NDPC and the National Information Technology Development Agency (NITDA) to address emerging cyber threats.
Jacobs said the training would enhance their capacity to protect data, promote awareness and contribute to Nigeria’s digital transformation.
He emphasised the need for continuous learning and adherence to global best practices to safeguard personal and sensitive information. UK FCA Sets Out Rules for Fund Tokenisation Innovation
