The Nigeria Data Protection Commission (NDPC) has developed sector-specific data protection and privacy regulatory frameworks for the financial, telecommunications and hospitality industries as part of efforts to strengthen compliance, safeguard personal information and promote responsible data processing across key sectors of the economy.

The National Commissioner of the NDPC, Dr. Vincent Olatunji, disclosed this on Thursday during a stakeholders’ engagement meeting in Abuja, where industry representatives, regulators and data protection experts gathered to review and refine the proposed frameworks.

The meeting provided a platform for stakeholders to exchange ideas, foster collaboration and contribute to the development of regulatory frameworks that align with international data protection and privacy standards.

Speaking at the event, Olatunji said the initiative was necessary because different sectors collect, process and manage personal data in unique ways, requiring tailored regulatory approaches.

He stressed the need for stronger compliance mechanisms among organisations involved in data collection and processing, noting that issues such as privacy policies, data protection impact assessments and records of processing activities vary across industries.

According to him, stakeholder input is critical to ensuring that the frameworks adequately address sector-specific challenges while building public trust in data processing activities.

“We want stakeholders from the different sectors to provide insights into the type of data they collect and what they expect from us in developing frameworks that will enhance trust and guide compliance,” he said.

Olatunji described the financial sector as particularly strategic due to the vast amount of personal information handled by banks and other financial institutions. He noted that traditional banks currently serve more than 60 million Nigerians, while digital banking platforms manage the data of over 40 million individuals.

He added that the telecommunications and hospitality industries also generate enormous volumes of personal data, making sector-specific regulatory frameworks essential for effective privacy protection and governance.

Earlier, the NDPC’s Head of Legal and Regulatory Enforcement, Mr. Babatunde Bamigboye, said the commission’s initiative was designed to protect privacy rights and other fundamental freedoms of citizens in an increasingly digital economy.

Bamigboye revealed that the commission had undertaken extensive consultations and assessments in developing the frameworks. According to him, the NDPC conducted at least 15 desk reviews and focus group discussions and evaluated more than 40,000 major data controllers and processors through compliance audit returns and registration records.

Providing insights into the proposed Hospitality Data Protection Framework, Chairman of Consultancy Support Services, Mr. Abdul-Hakeem Ajijola, said the hospitality sector had grown into one of the largest repositories of personal data in the country.

He explained that data collection within the industry spans a wide range of activities, including online hotel reservations, transportation bookings, digital payment systems and customer feedback platforms.

Ajijola estimated that the sector processes between 150 million and 300 million interaction-level data records annually, underscoring the need for robust privacy safeguards.

Also speaking, the Chief Executive Officer of Management Edge Ltd., Mr. Rex Abitogun, said the telecommunications industry requires a dedicated data protection framework due to the complexity and volume of information generated through communication networks and digital services.

Similarly, Prof. Rufus Ayodeji of BytePlus Consulting highlighted the importance of a specialised framework for the financial sector, noting that banks and financial institutions manage highly sensitive personal information, including National Identity Numbers (NIN), Bank Verification Numbers (BVN), salary records and account details.

Ayodeji said the proposed framework would establish a secure, transparent and accountable privacy governance structure capable of protecting personal data while supporting innovation, financial inclusion and Nigeria’s ongoing digital transformation agenda.

Stakeholders at the meeting expressed support for the initiative, describing sector-specific data protection regulations as a critical step toward enhancing public confidence, strengthening compliance and ensuring the responsible use of personal information across Nigeria’s rapidly expanding digital economy.