NCC and NDPC Sign Landmark Deal to Stop Telecom Operators from Misusing Subscriber Information

The days of “free” digital platforms quietly profiting from your personal information may be numbered. In a major step toward digital sovereignty, the Nigerian Communications Commission (NCC) and the Nigeria Data Protection Commission (NDPC) joined forces on Thursday to launch a massive crackdown on data privacy violations within the telecommunications sector.

By signing a high-level Memorandum of Understanding (MoU) in Abuja, the two regulators have effectively closed the gaps that previously allowed some data controllers and processors to operate with minimal oversight. Under the new pact, telecom giants must now answer to both the industry regulator and the national data authority, ensuring that every byte of subscriber data is handled with strict transparency.

“When a platform says it is free, it’s not really free somebody is monetizing your data,” warned NCC Executive Vice-Chairman, Dr. Aminu Maida. “We are laying the foundation where Nigerians can finally say ‘yes’ or ‘no’ to how their information is used. This isn’t just about privacy; it’s about our future as a sovereign nation in the age of AI.”

The timing is critical. With Nigeria’s digital economy exploding, regulators are concerned that without “data discipline,” the massive amounts of information generated by 170 million active lines could be exploited for unauthorized profit or even national security breaches.

NDPC Commissioner, Dr. Vincent Olatunji, echoed the need for speed, stating that the partnership will move straight from “paper to the field.” He emphasized that while the NCC provides the sectoral expertise, the NDPC brings the specialized legal framework to enforce the 2023 Data Protection Act, making it harder for companies to hide behind technical loopholes.

As Nigeria prepares for a future dominated by automation and “data unions,” this MoU serves as a warning to tech companies: the Nigerian subscriber is no longer just a product they are now a protected “data subject” with the law firmly on their side.