Nigeria Data Protection Commission Investigates TikTok and Truecaller Over Privacy Concerns

Nigeria Data Protection Commission Probes TikTok and Truecaller

The Nigeria Data Protection Commission (NDPC) has initiated an investigation into the data processing practices of TikTok and Truecaller over possible privacy breaches. Concerns are growing regarding how these platforms handle Nigerian users’ personal data, including consent violations and data sharing with third parties.

Speaking at a press conference in Abuja, Dr. Vincent Olatunji, CEO of the NDPC, confirmed the probe while announcing the issuance of the Nigeria Data Protection Act – General Application and Implementation Directive (NDPC Act – GAID), 2025.

READ ALSO: Africa’s Green Economy Summit 2025: AfDB Calls for Tripling of Climate Finance

Why the Nigeria Data Protection Commission Is Investigating

The NDPC investigation is centered on ensuring that TikTok and Truecaller comply with the Nigeria Data Protection Act (NDPA), 2023. Authorities are particularly concerned about:

• How these companies collect, store, and process user data
• Whether they obtain proper user consent before sharing data
• Their data security practices and compliance with local regulations

Dr. Olatunji stated that protecting the privacy rights of Nigerians is a top priority. The Nigeria Data Protection Commission aims to hold organizations accountable for their handling of personal information.

NDPC Act – GAID 2025: Strengthening Data Protection in Nigeria

To reinforce Nigeria’s data protection laws, the NDPC Act – GAID, 2025, introduces:

• Clear guidelines for compliance with data privacy regulations
• Enforcement measures to penalize non-compliant companies
• Data governance policies for public and private organizations

Dr. Olatunji emphasized that these rules will enhance trust in Nigeria’s digital economy, ensuring that companies adhere to global data protection standards.

Companies Must Comply or Face Penalties

The Nigeria Data Protection Commission has warned that any company operating in Nigeria must comply with the NDPA, 2023. Failure to meet these requirements could result in:

• Regulatory fines for data privacy violations
• Operational restrictions for companies breaching data protection laws
• Public reporting mechanisms for Nigerians to report data privacy concerns

The NDPC encourages the public to report any data breaches through official channels available on its website. By enforcing these policies, Nigeria is taking significant steps to protect user privacy and strengthen data security regulations.