NDPC, Meta unveil two-year data protection initiative

The Nigeria Data Protection Commission (NDPC) has partnered with Meta, Facebook's parent company, to launch a significant two-year initiative aimed at bolstering data protection and privacy safeguards within Nigeria. This collaboration, known as the Meta-Supported Initiatives for Data Protection (M-SIDP), stems from a regulatory engagement that followed an investigation into Meta's data processing activities in the country.

The investigation concluded in 2025 with a court-approved settlement, wherein Meta committed to supporting public-facing data protection initiatives that align with Nigeria's privacy framework. The M-SIDP program is designed to reinforce strategic guardrails for data subjects and will run for two years, adhering to the objectives of the Nigeria Data Protection Act, 2023, and the NDPC's strategic roadmap.

The initiative will concentrate on four key areas: enhancing governance, research, and development; strengthening safety and sustainability mechanisms across the technology ecosystem; building capacity for data protection officers and compliance organizations; and executing public awareness campaigns targeting data subjects, with a particular emphasis on vulnerable groups.

“

As part of the settlement, Meta committed to supporting a two-year programme of public-facing data protection measures that aligns with the objectives of the Nigeria Data Protection Act, 2023, the NDP Act General Application and Implementation Directive and the NDPC Strategic Roadmap and Action Plan 2023–2027.

According to a statement from the NDPC, this initiative does not impede its statutory authority. The commission affirmed its commitment to independently regulating data processing activities in Nigeria in accordance with existing laws. It also pledged to provide regular updates on the M-SIDP program's implementation and urged stakeholders to support the initiative in fostering a secure and accountable privacy ecosystem.

For Meta, this partnership represents an opportunity to improve its regulatory standing in Nigeria, one of Africa's largest internet markets, following a dispute that attracted attention from policymakers and privacy advocates. The NDPC, since its establishment, has been increasing its scrutiny of how organizations handle personal data, viewing stronger privacy protections as crucial for building trust in digital services and attracting investment in Nigeria's rapidly growing technology sector.

“

The commission will consistently provide periodic updates on the implementation of the M-SIDP programme and calls on all stakeholders to support the initiative in advancing a secure and accountable privacy ecosystem in Nigeria.