The Nigeria Data Protection Commission (NDPC) has partnered with the Federal Ministry of Health and Social Welfare to implement a comprehensive data protection framework for the healthcare sector. This initiative aims to safeguard sensitive patient information as Nigeria accelerates its digital healthcare transformation, including electronic medical records and telemedicine services1.
Strategic Collaboration for Healthcare Data Security
The partnership was formalized during high-level meetings between NDPC National Commissioner Dr. Vincent Olatunji and Health Minister Prof. Muhammad Ali Pate. The collaboration will require 107 health agencies to comply with the NDPC Act of 2023, which includes provisions for extraterritorial jurisdiction over data processors handling Nigerian citizens’ information2. The framework specifically addresses risks such as discrimination, misdiagnosis, and stigmatization resulting from healthcare data breaches.
According to Itunu Dosekun, Head of the NDPC Media Unit, the initiative includes sector-specific training programs and compliance audits for healthcare data handlers. These measures will cover hospitals, health maintenance organizations (HMOs), and medical research institutions3. The NDPC’s General Application and Implementation Directive (GAID) outlines specific compliance mechanisms, including grievance resolution procedures and mandatory audits.
Technical Implementation and Enforcement
The NDPC Act establishes strict requirements for cross-border data transfers, mandating that international data processors meet Nigerian “adequacy” standards. This provision gains significance as the commission investigates platforms like TikTok and Truecaller for alleged breaches involving Nigerian users’ data4. Healthcare organizations must now appoint Data Protection Officers (DPOs) and implement controls for biometric data processing, which is increasingly used in patient identification systems.
The data protection industry in Nigeria has grown to an estimated ₦10 billion sector with over 10,000 professionals, creating new opportunities in compliance roles5. The NDPC will conduct regular assessments of healthcare providers’ data processing activities, with particular focus on:
- Secure storage and transmission of electronic health records
- Access controls for sensitive patient data
- Audit trails for all data access and modifications
- Breach notification procedures compliant with NDPC timelines
Compliance Requirements for Healthcare Organizations
Healthcare providers must now implement technical measures aligned with the NDPC framework, including encryption for data at rest and in transit, regular vulnerability assessments, and strict access controls based on role-based permissions. The commission has emphasized that non-compliant organizations face significant penalties under the NDPC Act, which includes fines of up to 2% of annual gross revenue for severe violations6.
The partnership represents a significant step in Nigeria’s efforts to protect sensitive health information amid increasing digitization. With the healthcare sector processing particularly sensitive categories of personal data, this framework establishes much-needed safeguards against misuse while supporting the sector’s technological advancement.
References
- “NDPC, Health Ministry Partner to Boost Data Protection in Healthcare,” Malware News, Apr. 19, 2025. [Online]. Available: https://malware.news/t/ndpc-health-ministry-partner-to-boost-data-protection-in-healthcare/93379
- “Nigeria’s NDPC, Health Ministry Launch Data Privacy Overhaul,” Nairaland. [Online]. Available: https://www.nairaland.com/8402296/nigerias-ndpc-health-ministry-launch
- “NDPC Partners with Health Ministry to Boost Data Protection in Nigeria’s Healthcare Sector,” Nairametrics, Apr. 18, 2025. [Online]. Available: https://www.nairametrics.com/2025/04/18/ndpc-partners-with-health-ministry-to-boost-data-protection-in-nigerias-healthcare-sector/
- “Nigeria Launches TikTok, Truecaller Alleged Data Breach Investigation,” Legit.ng. [Online]. Available: https://www.legit.ng/business-economy/technology/1651061-nigeria-launches-tiktok-trucaller-alleged-data-breach-sanction-platforms/
- “Nigeria’s Health Ministry Backs NDPC to Enforce National Data Protection Law,” News Central TV. [Online]. Available: https://newscentral.africa/nigerias-health-ministry-backs-ndpc-to-enforce-national-data-protection-law/
- “NDPC, Health Ministry Partner to Boost Data Protection in Healthcare,” Voice of Nigeria. [Online]. Available: https://von.gov.ng/ndpc-health-ministry-partner-to-boost-data-protection-in-healthcare/
