NDPC issues code of conduct for Data Protection Compliance Organisations

The Nigeria Data Protection Commission, NDPC, has issued a Code of Conduct for Data Protection Compliance Organisations, DPCOs, in the country.

The National Commissioner of NDPC, Dr Vincent Olatunji, said this is in line with the commission’s enforcement drive in 2024 and the bid to ensure professionalism among firms that are licenced to carry out compliance as a service.

Olatunji, who addressed the meeting of the Commission with the DPCOs on Tuesday, urged them to see their role in the implementation of the Nigeria Data Protection Act (NDPA) 2023 as a public trust that must be guarded with the utmost sense of responsibility.

Olatunji noted the opportunities presented by the act, particularly the lawful use of data and job creation in the data processing value chain.

Among other things, the NDPA states that for a firm to operate as a DPCO and carry out compliance services, it must, among others, be duly licenced by the commission and have a verifiably certified Data Protection Officer.

As of November 2023, at least 163 DPCOs have been licensed by the commission.