The Nigeria Data Protection Commission (NDPC) has launched an investigation into the data processing practices of Tiktok and Truecaller, amid growing concerns over potential privacy violations.
Dr. Vincent Olatunji, the Chief Executive Officer of the NDPC, disclosed this today at a press conference in Abuja, where he announced the issuance of the Nigeria Data Protection Act – general application and implementation directive (NDPC act – GAID), 2025.
According to Dr. Olatunji, the commission is particularly concerned about how these platforms handle Nigerian users’ personal data, including potential breaches of consent, data sharing with third parties, and overall compliance with the Nigeria Data Protection Act (NDPA), 2023.
He said the NDPC is actively investigating the data processing activities of Tiktok and Truecaller to ensure their compliance with Nigeria’s data protection laws.
According to him, the goal is to safeguard the privacy rights of Nigerians and hold organizations accountable for how they collect, store, and use personal data.
The investigation follows increasing scrutiny of global technology companies over data privacy concerns, particularly regarding how personal information is processed, stored, and transmitted beyond national borders.
The NDPC act – GAID, 2025, issued today, provides a comprehensive framework for the implementation of Nigeria’s data protection law, setting out specific guidelines for compliance, enforcement mechanisms, and obligations for both private and public sector organizations.
Dr. Olatunji emphasized that the directive aims to strengthen Nigeria’s digital economy by fostering trust in data governance while ensuring that individuals’ rights to privacy are upheld in line with international best practices.
He further reiterated that companies operating in Nigeria must align with the country’s data protection regulations or face regulatory actions, including fines and potential restrictions on their operations.
The NDPC has called on the public to report any data privacy violations and reaffirmed its commitment to transparency and due process in its investigations. According to the commission, reporting data breaches have become easier with dedicated channels of reaching out to the Commission from its official website.
