Cybergon Limited, a licensed Data Protection Organisation and a Data Protection Certification Body certified by the Nigeria Data Protection Commission (NDPC) and recognised by the Federal Government, has restated the need for organisations in Nigeria to move beyond paper-based compliance and focus on practical data protection and cybersecurity implementation.
The company said many organisations appear compliant through documentation but fail to apply the required measures in daily operations. According to Cybergon, this gap continues to expose public and private institutions to avoidable data breaches and cyber incidents.
For several decades, Cybergon Limited has worked in data protection training, cybersecurity services, capacity building and the organisation of national and international conferences. The company said its focus has remained on helping organisations understand how data protection laws work in practice, not only how they are written.
This position was reinforced at Cybergon’s 2025 national cybersecurity conference, themed The Last Data Breach. The event brought together participants from the military, security agencies, the Nigeria Security and Civil Defence Corps, the Nigeria Police Force, law enforcement bodies, the Nigerian Computer Emergency Response Team (NG-CERT), Galaxy Backbone, Jaiz Bank, Police Mortgage Bank and other institutions. Their participation reflected growing attention to data protection and cybersecurity issues in Nigeria.
The 2025 conference followed the 2024 national event titled 141 Servers Down, which was attended by the Speaker of the House of Representatives, represented by the Chairman of the House Committee on Cybersecurity. That session allowed lawmakers to observe real cybersecurity incidents and engage directly with industry practitioners. Since then, Cybergon noted that policy and regulatory actions within Nigeria’s digital space have shown visible changes.
Speaking at the conference, the Lead Consultant and Director of Technical Services at Cybergon Limited, Benedict Ugwuja, said cyberspace is now receiving more attention from regulators and institutions. He acknowledged the NDPC for its cooperation and efforts aimed at reducing cyber incidents linked to negligence and the absence of preventive measures.
Ugwuja stated that many data breaches occur not only because of attackers, but because organisations fail to secure the data entrusted to them. He said compliance often exists on paper, while systems, processes and staff awareness remain weak.
The conference included live data breach simulations, cybersecurity defence sessions, Nigeria Data Protection Act (NDPA) training, and data protection and compliance advisory workshops. These activities were structured to help organisations assess and improve their real compliance status.
Ugwuja said Nigeria must move away from paper compliance to practical compliance, noting that effective compliance reflects the purpose and intent of the Nigeria Data Protection Act 2023 and the establishment of the NDPC. He added that some organisations stop at documentation, while some Data Protection Officers and licensed Data Protection Compliance Organisations lack the technical capacity needed to support effective compliance.
He announced that Cybergon Limited will roll out intensive practical training programmes for organisations, Data Protection Officers and licensed DPCOs. According to him, without real implementation, data protection efforts have limited value. He said, “We have partnered with the Data Protection Support Group, a global community that provides support, technical training and job opportunities for certified Data Protection Officers worldwide, including GDPR, COBIT, HIPAA and ISO 27001.”
Ugwuja also disclosed that Cybergon has opened communication channels with the NDPC to strengthen collaboration and oversight. He said improved oversight would push organisations to take compliance seriously, adding that some schools, companies and hospitals have previously treated data protection as optional.
On enforcement, he referenced the publication of 1,369 non-compliant organisations across sectors such as insurance and media, noting that compliance levels increased afterwards. He said public awareness of privacy rights has also grown.
He called for sustained enforcement, stating that data protection supports national development, economic stability and public trust. He also urged the Minister of Communications, Innovation and Digital Economy, Dr Bosun Tijani, to prioritise cybersecurity alongside artificial intelligence and emerging technologies.
The event concluded with participants receiving items, including one year of internet access provided by Airtel Nigeria.
Cybergon also commended the National Commissioner and Chief Executive Officer of the NDPC, Dr Vincent Olatunji, for enforcing the Nigeria Data Protection Act and promoting digital trust. The company congratulated the Commission on its recognition as Outstanding Data Protection Authority at the 2025 PICASSO Awards Africa.
Cybergon Limited said it will continue working with regulators, organisations and the public to support a secure and privacy-respecting digital environment in Nigeria.
