The Nigeria Data Protection Commission (NDPC) has announced a strategic partnership with the Federal Ministry of Health and Social Welfare aimed at bolstering data protection standards within the nation’s healthcare sector.
This collaboration was formalised during a working visit by the NDPC’s National Commissioner and CEO, Dr Vincent Olatunji, to the Coordinating Minister of Health and Social Welfare, Professor Muhammad Ali Pate, in Abuja.
The initiative highlights the pressing need to protect sensitive patient information and ensure full adherence to the Nigeria Data Protection Act, 2023.
During the meeting, Dr Olatunji outlined the Commission’s mandate and emphasised the growing urgency of safeguarding health-related data. He called for the development of robust systems by healthcare providers and policymakers to ensure patient confidentiality and prevent data breaches, which he warned could have serious consequences, including discrimination, incorrect diagnoses, or even fatalities in extreme situations.
“This sector is generally sensitive, and the kind of information collected has to do with medical records which could be used to discriminate against anyone seeking to have a good healthcare,” he stated.
Dr Olatunji also referenced the increasing global reliance on digital technologies, noting that each online interaction contributes to a “digital blueprint” of an individual’s personal data. He stressed the need for healthcare institutions, including hospitals, Health Management Organisations (HMOs), and all entities handling patient information, to maintain a secure data environment.
Responding to the Commissioner’s remarks, Professor Pate acknowledged the critical nature of health data and expressed appreciation for the insights shared. “The health sector is a unique sector. We collect extensive data — from personal health details to demographic statistics — across all our facilities,” he said.
The Minister commended the Commission’s progress and reaffirmed the Ministry’s dedication to ensuring data protection compliance across its 107 associated bodies.
He also raised questions about the extraterritorial implications of the Nigeria Data Protection Act, its mechanisms for regulating external data threats, and the safeguards available for sensitive research and biodiversity data.
In response, Dr Olatunji clarified that the 2023 Act applies to any organisation processing the personal data of Nigerian citizens, regardless of whether they operate inside or outside the country. He explained, “If you reside in Nigeria and process Nigerian data, you are within scope. Even if you are outside Nigeria, once you process the data of Nigerians, you are within scope — and that’s why we are currently investigating global platforms like Truecaller and TikTok.”
To support the implementation of data protection standards in the sector, Dr Olatunji also offered complimentary training sessions to build foundational privacy awareness among healthcare professionals. “We’re happy to offer free induction training for your staff — to build foundational understanding of data protection principles,” he added.