Cite this article as: Yusuf, I. S., Yakubu, S. M., & Aminu, J. (2026). Assessing the Effectiveness of Nigeria's Data Protection Act in Safeguarding Users' Privacy on Social Media Platforms. Sokoto Journal of Linguistics and Communication Studies (SOJOLICS), 2(1), xx-xx. https://doi.org/10.36349/sojolics.2026.v02i01.050
By
Isah Sani Yusuf
Department of Mass
Communication,
Nasarawa State
University, Keffi
isahsaniy@nsuk.edu.ng
08030697062
&
Salisu Mohammed Yakubu
Department of Mass
Communication,
Nasarawa State
University, Keffi
yakubumohsal@gmail.com
&
Jamila Aminu
Department of Mass
Communication,
Nasarawa State
University, Keffi
jamilaaminu@nsuk.edu.ng
Abstract
The Nigeria Data
Protection Act (NDPA) 2023 was enacted to strengthen personal data protection
and digital privacy in Nigeria. However, empirical evidence on social media
users' awareness of the Act and their perceptions of its effectiveness remains
limited, particularly in North Central Nigeria. This study examined users'
awareness of the NDPA and their perceptions of its effectiveness in
safeguarding privacy on social media platforms. A survey research design was
adopted, and structured questionnaires were administered to 200 purposively
selected social media users across Abuja (FCT), Benue, Kogi, Kwara, Nasarawa,
Niger, and Plateau States. A total of 186 questionnaires were retrieved,
representing a 93% response rate, and analysed using descriptive statistics.
The findings revealed that although 62% of respondents were aware of digital
privacy concerns, only 41% were familiar with the NDPA. While 74% believed that
social media platforms collect excessive personal information, only 48%
perceived that the Act had moderately improved users' privacy protection. Weak
enforcement, low public awareness, organisational non-compliance, and
technological limitations were identified as major implementation challenges.
The study recommends stronger regulatory enforcement, increased public
awareness, enhanced digital literacy, and improved organisational compliance to
strengthen data protection in Nigeria.
Keywords: NDPA, Data Protection, Social Media, Privacy, Digital
Governance, North Central Nigeria
1.0 Introduction
The rapid advancement of
digital communication technologies has transformed communication, commerce,
education, governance, and information dissemination worldwide. In Nigeria,
social media platforms such as Facebook, WhatsApp, Instagram, TikTok, YouTube,
and X (formerly Twitter) have become indispensable channels for interpersonal
communication, business transactions, political participation, and information
exchange, particularly among young people and students. In North Central
Nigeria, increased smartphone penetration, improved internet accessibility, and
expanding digital infrastructure have accelerated the adoption of these
platforms in urban centres such as Abuja, Jos, Ilorin, Lokoja, Lafia, Minna,
and Makurdi. Consequently, social media have become central to everyday social
and economic activities, creating new opportunities for communication,
networking, and civic engagement (Xie et al., 2025).
While these
technological developments have enhanced connectivity and access to
information, they have also intensified concerns regarding the privacy and
security of users' personal information. Social media platforms routinely
collect, process, store, and share large volumes of personal and behavioural
data for service delivery, targeted advertising, and content personalisation.
Such practices have increased users' exposure to cyberstalking, phishing,
identity theft, data breaches, cyberbullying, digital surveillance, and other
forms of unauthorised data processing. Effoduh and Odeh (2024) argue that
Nigeria's expanding digital ecosystem has exposed citizens to significant
privacy risks arising from weak institutional safeguards, inadequate regulatory
enforcement, and limited digital literacy. Similarly, Cheng and Guo (2025)
contend that the extensive collection of users' behavioural data often occurs
without meaningful informed consent, thereby increasing the risks of profiling,
surveillance, and misuse of personal information.
Growing public concern
over these risks has reinforced the need for effective legal and institutional
mechanisms to regulate the processing of personal data. Böyük (2025) observes
that although social media companies provide privacy policies and user consent
mechanisms, these documents are frequently lengthy, technical, and difficult
for ordinary users to understand, thereby limiting informed decision-making.
Likewise, Peter and Ndinojuo (2024) report that although Nigerian social media
users increasingly recognise the importance of protecting their personal
information, many remain unfamiliar with the institutions and legal mechanisms
responsible for safeguarding their privacy rights.
Nigeria's first
comprehensive attempt to regulate the processing of personal data was the
introduction of the Nigeria Data Protection Regulation (NDPR) in 2019. The
regulation established principles relating to lawful processing, informed
consent, confidentiality, and organisational accountability. However, its
implementation was constrained by limited institutional authority, weak
enforcement mechanisms, poor organisational compliance, and inadequate public
awareness. To address these limitations, the Nigeria Data Protection Act (NDPA)
2023 was enacted, establishing the Nigeria Data Protection Commission (NDPC) as
the statutory authority responsible for regulating data processing activities
and enforcing compliance with data protection obligations. The Act provides
legal safeguards relating to informed consent, access to personal data,
correction of inaccurate information, data portability, and protection against
unlawful disclosure or misuse of personal information. According to Adeoye
(2025), the enactment of the NDPA represents an important milestone in aligning
Nigeria's data protection regime with international standards, including the
European Union's General Data Protection Regulation (GDPR). Similarly, Ramadan,
Risnain, and Nugraha (2025) emphasise that effective data protection
legislation is fundamental to promoting trust, accountability, and privacy
within contemporary digital environments.
Despite these
legislative developments, concerns regarding online privacy violations and
cyber insecurity remain widespread in Nigeria. Reports of phishing attacks,
identity theft, fake social media accounts, cyber fraud, and unauthorised
disclosure of personal information continue to raise questions about the extent
to which the NDPA has translated into improved privacy protection in practice.
These concerns are particularly relevant in North Central Nigeria, where
disparities in digital literacy, technological infrastructure, and public
awareness may influence users' understanding of data protection rights and
their perceptions of the effectiveness of existing regulatory measures.
Although previous
studies have examined data protection, digital privacy, and cybersecurity in
Nigeria, much of the existing literature has focused on legal analyses, policy
discussions, or general privacy concerns, with limited empirical attention
given to social media users' awareness of the NDPA and their perceptions of its
effectiveness, particularly within North Central Nigeria. Consequently, there
remains insufficient empirical evidence regarding the extent to which users
understand the provisions of the Act, perceive its effectiveness in protecting
their personal information, and identify the practical challenges affecting its
implementation.
It is against this
background that this study investigates social media users' awareness of the
Nigeria Data Protection Act (NDPA) 2023 and examines their perceptions of its
effectiveness in safeguarding personal privacy on social media platforms in
North Central Nigeria. The findings are expected to contribute to ongoing
discussions on digital governance and provide evidence to support policy
measures aimed at strengthening data protection and privacy in Nigeria.
2.0 Literature Review
Data protection has
become a fundamental component of digital governance as governments and
organisations increasingly rely on information technologies to collect,
process, store, and transfer personal data. It encompasses the legal,
institutional, and technological measures designed to ensure that personal
information is processed lawfully, securely, and transparently while
safeguarding individuals' privacy rights. According to Anigbogu (2025),
effective data protection legislation promotes organisational accountability,
protects citizens against the misuse of personal information, and strengthens
public confidence in digital services. Similarly, robust data governance
frameworks provide the legal basis for balancing technological innovation with
the protection of individual privacy rights.
The rapid expansion of
social media platforms, including Facebook, WhatsApp, Instagram, TikTok,
YouTube, and X (formerly Twitter), has transformed communication, commerce,
education, and political participation in Nigeria. However, this digital
transformation has also increased users' exposure to privacy risks arising from
the extensive collection and processing of personal information by social media
companies. Effoduh and Odeh (2024) observe that many Nigerian internet users
disclose personal information online without fully appreciating the
implications of digital surveillance, behavioural profiling, and data
exploitation. Similarly, Cheng and Guo (2025) argue that the large-scale
collection of users' behavioural data has increased concerns regarding informed
consent, transparency, and the commercial use of personal information.
Together, these studies suggest that while social media platforms have expanded
opportunities for digital participation, they have simultaneously heightened
concerns about privacy protection and data security.
Nigeria's initial
regulatory response to these concerns was the introduction of the Nigeria Data
Protection Regulation (NDPR) in 2019. Chiamogu and Chiamogu (2025) explain that
the NDPR sought to align Nigeria's data governance framework with international
standards, particularly the European Union's General Data Protection Regulation
(GDPR), by establishing principles governing lawful processing, informed
consent, confidentiality, and data security. Despite these objectives, several
scholars agree that the regulation achieved only limited success because it
lacked adequate institutional authority and effective enforcement mechanisms.
Consequently, weak regulatory oversight and poor organisational compliance
limited its practical impact on protecting users' personal information.
To strengthen the
country's legal framework, the Nigeria Data Protection Act (NDPA) 2023
established the Nigeria Data Protection Commission (NDPC) as the statutory body
responsible for regulating data processing activities and enforcing compliance
with data protection obligations. Adeoye (2025) argues that the Act represents
a significant improvement over the NDPR by introducing clearer provisions
relating to informed consent, accountability, transparency, data subject
rights, and the responsibilities of data controllers and processors. These
reforms demonstrate Nigeria's commitment to strengthening digital governance
and aligning its legal framework with international best practices. However,
the existence of a comprehensive legal framework does not necessarily guarantee
effective implementation or improved privacy protection in practice.
Empirical studies
examining public awareness of data protection in Nigeria present relatively
consistent findings. Peter and Ndinojuo (2024) report that Nigerian social
media users are increasingly concerned about excessive data collection, cyber
fraud, and unauthorised use of personal information. Likewise, Onatuyeh,
Oghorodi, Okpako, and Ojei (2025) attribute the growing concern about digital
privacy to the increasing prevalence of cybercrime and online fraud.
Nevertheless, Asere, Adenomon, and Aimufua (2025) argue that although awareness
of digital privacy risks has improved, knowledge of the specific provisions,
rights, and protections contained in the NDPA remains relatively low. These
findings collectively suggest that general awareness of online privacy does not
necessarily translate into adequate understanding of the legal mechanisms
available for protecting personal data.
Scholarly opinion
diverges more noticeably regarding the effectiveness of the NDPA. On one hand,
Adeoye (2025) contends that the Act has strengthened Nigeria's legal framework
by enhancing institutional accountability, promoting transparency in data processing,
and expanding the legal rights of data subjects. On the other hand, Ugbedeojo
(2025) argues that weak enforcement mechanisms, inadequate institutional
capacity, and poor compliance among public and private organisations continue
to undermine the practical effectiveness of the legislation. Similarly,
Alakitan and Makinde (2025) maintain that inadequate ethical governance and
weak institutional monitoring reduce the ability of the Act to protect users
from unlawful surveillance and digital exploitation. Supporting this position,
Osimen and Wonosikou (2025) argue that effective data protection depends not
only on comprehensive legislation but also on strong regulatory institutions,
independent oversight, and consistent enforcement. The contrasting positions
presented by these scholars indicate that while the NDPA provides a stronger
legal framework, questions remain regarding its practical implementation and
effectiveness.
Beyond legal and
institutional issues, the literature identifies several operational challenges
affecting the implementation of the NDPA. Ugbedeojo (2025) highlights
inadequate funding, limited technological infrastructure, shortages of skilled
personnel, and weak regulatory capacity as major barriers to effective
implementation. Similarly, Asere et al. (2025) identify low public awareness
and inadequate digital literacy as significant factors that continue to expose
many Nigerians to online privacy risks. These challenges are particularly
pronounced in semi-urban and rural communities where access to digital
infrastructure and cybersecurity awareness programmes remains limited. Nata'ala
(2025) further observes that the increasing sophistication of cyber threats,
including phishing attacks, malware, identity theft, and fake social media
accounts, has intensified the need for stronger institutional capacity and more
effective implementation of data protection laws. Collectively, these studies
demonstrate that legal reforms alone cannot adequately protect users' privacy
without corresponding improvements in institutional capacity, technological
infrastructure, public awareness, and organisational compliance.
Although the existing
literature provides valuable insights into Nigeria's evolving data protection
regime, several limitations remain. Much of the available research focuses on
legal analyses of the NDPA, policy discussions, or broader issues of cybersecurity
and digital governance. Comparatively fewer empirical studies have examined
social media users' awareness of the NDPA, their perceptions of its
effectiveness, and the practical implementation challenges experienced within
specific geopolitical regions of Nigeria. Furthermore, limited empirical
attention has been given to North Central Nigeria, where variations in digital
literacy, technological infrastructure, and public awareness may influence
users' experiences and perceptions of data protection. This gap provides the
justification for the present study, which investigates social media users'
awareness of the NDPA, examines their perceptions of its effectiveness in
protecting personal privacy, and identifies the major challenges affecting its
implementation within North Central Nigeria.
3.0 Theoretical
Framework
This study is anchored
on the Communication Privacy Management (CPM) Theory, developed by Sandra
Petronio (1991; 2002). The theory explains how individuals manage personal
information by establishing privacy boundaries and making decisions about what
information to disclose, to whom, and under what conditions. Originally
developed to explain privacy management in interpersonal communication, CPM has
been widely applied to studies of digital communication and online privacy
because it provides a useful framework for understanding how individuals
negotiate privacy in technology-mediated environments, including social media
platforms.
Communication Privacy
Management Theory is founded on several interrelated principles, namely privacy
ownership, privacy control, and privacy boundaries. The theory assumes that
individuals perceive personal information as something they own and, therefore,
believe they have the right to determine how that information is collected,
shared, processed, and used. When individuals disclose personal information to
others, the recipients become co-owners of that information and are expected to
adhere to mutually understood privacy rules governing its use. Effective
privacy management therefore depends on the establishment and maintenance of
clear privacy boundaries.
A central concept of the
theory is boundary coordination, which refers to situations where co-owners of
personal information respect agreed privacy rules. Conversely, boundary
turbulence occurs when these rules are violated through unauthorised disclosure,
misuse, or access to personal information. Within digital environments,
boundary turbulence may manifest through data breaches, phishing attacks,
identity theft, cyberstalking, unauthorised data sharing, or other forms of
privacy violations that undermine users' trust and confidence in digital
platforms.
The theory further
posits that individuals continuously negotiate privacy boundaries based on
factors such as trust, perceived risk, motivation, culture, and context. In
social media environments, users routinely make decisions about the amount and
type of personal information they disclose while relying on platform providers
to process such information responsibly. However, because users often have
limited knowledge of complex data processing practices and privacy policies,
they may be unable to exercise complete control over their personal
information, thereby increasing their vulnerability to privacy breaches.
Communication Privacy
Management Theory provides an appropriate framework for this study because the
principles underpinning the Nigeria Data Protection Act (NDPA) 2023 closely
align with the theory's assumptions regarding privacy ownership and information
control. The NDPA seeks to safeguard individuals' personal information by
establishing legal requirements relating to informed consent, lawful
processing, transparency, accountability, data security, and the rights of data
subjects. These legal protections are intended to strengthen users' ability to
control how their personal information is collected and processed while holding
data controllers and processors accountable for compliance with established
privacy rules.
More importantly, the
theory provides a conceptual basis for understanding the study variables. The
first objective, which examines users' awareness of the NDPA, relates to the
extent to which individuals understand their privacy rights and the legal mechanisms
available for protecting their personal information. The second objective,
which investigates users' perceptions of the effectiveness of the NDPA,
reflects the degree to which respondents believe existing legal and
institutional arrangements support effective privacy boundary coordination and
reduce incidents of boundary turbulence. The third objective, which identifies
challenges affecting the implementation of the Act, corresponds with the
institutional and technological factors that may prevent individuals from
exercising effective control over their personal information despite the
existence of legal safeguards.
Although CPM Theory
provides valuable insights into privacy management, it has certain limitations
when applied to contemporary digital environments. The theory was originally
developed within the context of interpersonal communication and therefore gives
limited attention to emerging issues such as artificial intelligence,
algorithmic profiling, automated decision-making, large-scale data analytics,
and the commercial exploitation of personal data by digital platforms.
Furthermore, the theory assumes that individuals possess substantial control
over their personal information, whereas social media users often have limited
knowledge of data processing practices and limited bargaining power over the
collection, sharing, and monetisation of their personal data. In developing
countries such as Nigeria, these limitations may be further compounded by
inadequate digital literacy, weak institutional enforcement, and technological
constraints. The theory also provides limited explanation of the role played by
regulatory institutions, such as the Nigeria Data Protection Commission (NDPC),
in ensuring compliance with data protection legislation.
Despite these
limitations, Communication Privacy Management Theory remains the most
appropriate theoretical framework for this study because it explains how
individuals perceive, manage, and protect their personal information within
digital environments. Its emphasis on privacy ownership, information control,
and boundary management provides a sound conceptual foundation for examining
social media users' awareness of the Nigeria Data Protection Act (NDPA) 2023,
their perceptions of its effectiveness in protecting personal privacy, and the
challenges affecting its implementation in North Central Nigeria.
4.0 Methodology
This study adopted a
survey research design to examine social media users' awareness of the Nigeria
Data Protection Act (NDPA) 2023 and their perceptions of its effectiveness in
safeguarding personal privacy in North Central Nigeria. The target population
comprised active social media users in selected universities and urban centres
across Abuja (FCT), Benue, Kogi, Kwara, Nasarawa, Niger, and Plateau States.
Using purposive sampling, 200 respondents were selected based on their active
use of platforms such as Facebook, WhatsApp, Instagram, TikTok, and X (formerly
Twitter). Data were collected through a structured questionnaire containing
close-ended items on awareness of the NDPA, privacy experiences, and
perceptions of the Act's effectiveness. Of the 200 questionnaires administered,
186 were retrieved and analysed, representing a 93% response rate. Data were
analysed using descriptive statistics, including frequency counts and
percentages.
5.0 Data Presentation
and Analysis
A total of 200
questionnaires were distributed to respondents across selected urban and
semi-urban centres in North Central Nigeria. Out of these, 186 questionnaires
were successfully retrieved and analysed, representing a response rate of 93%.
The data collected were analysed using frequency counts and percentages in line
with the objectives of the study.
To Examine Users’
Awareness of Nigeria’s Data Protection Act (NDPA)
Table 1: Respondents’ Awareness of Data Privacy and the NDPA 2023
|
Variables |
Frequency
(N=186) |
Percentage
(%) |
|
Respondents aware of general data
privacy concerns |
115 |
62% |
|
Respondents familiar with the
provisions of the NDPA 2023 |
76 |
41% |
|
Respondents not familiar with the
NDPA 2023 |
110 |
59% |
|
Respondents actively using more
than three social media platforms daily |
132 |
71% |
Table 1 reveals that 62%
of the respondents were aware of general data privacy concerns within Nigeria’s
digital environment. However, only 41% indicated familiarity with the specific
provisions of the Nigeria Data Protection Act (NDPA) 2023, while 59% lacked
adequate knowledge of the Act. The findings suggest that although awareness
regarding online privacy risks is gradually increasing, detailed understanding
of Nigeria’s legal data protection framework remains relatively low among
social media users in North Central Nigeria. The table also shows that 71% of
respondents actively use more than three social media platforms daily,
indicating high exposure to digital communication environments where privacy
risks are prevalent.
To Assess the
Effectiveness of the NDPA in Safeguarding Users’ Privacy on Social Media
Platforms
Table 2: Respondents’ Perception of Privacy Protection on Social
Media Platforms
|
Variables |
Frequency (N=186) |
Percentage (%) |
|
Respondents who believe social
media platforms collect excessive personal information |
138 |
74% |
|
Respondents concerned about
unauthorised sharing of personal information |
126 |
68% |
|
Respondents who experienced
suspicious online activities such as phishing or data breaches |
110 |
59% |
|
Respondents who believe the NDPA
has moderately improved digital privacy protection |
89 |
48% |
Table 2 indicates that
74% of respondents believed that social media platforms collect excessive
personal information without adequate transparency or informed consent.
Additionally, 68% expressed concerns regarding the unauthorised sharing of
personal information with third parties. The findings further reveal that 59%
of respondents had experienced suspicious online activities such as phishing
attempts, fake account impersonation, or attempted data breaches. Although 48%
believed that the NDPA has moderately improved digital privacy protection, the
overall findings suggest that many users still perceive significant
vulnerabilities within Nigeria’s digital environment. This implies that the
effectiveness of the NDPA in safeguarding users’ privacy remains limited by
practical implementation challenges.
To Identify Challenges
Affecting the Implementation of Nigeria’s Data Protection Policy
Table 3: Challenges
Affecting the Implementation of the NDPA 2023
|
Variables |
Frequency
(N=186) |
Percentage
(%) |
|
Weak enforcement mechanisms |
134 |
72% |
|
Low public awareness |
123 |
66% |
|
Poor organisational compliance |
113 |
61% |
|
Technological and infrastructural
limitations |
108 |
58% |
Table 3 reveals that 72%
of respondents identified weak enforcement mechanisms as the major challenge
affecting the implementation of Nigeria’s data protection policy. Furthermore,
66% cited low public awareness and inadequate sensitisation regarding privacy
rights as significant barriers. Similarly, 61% identified poor organisational
compliance with data protection regulations, while 58% pointed to technological
and infrastructural limitations as factors undermining effective implementation
of the NDPA. The findings demonstrate that despite the existence of legal
provisions for data protection, institutional weaknesses, inadequate awareness,
and infrastructural deficiencies continue to hinder effective privacy
protection on social media platforms in Nigeria, particularly within North
Central Nigeria.
6.0 Discussion of
Findings
The discussion of
findings is presented in relation to the study objectives, relevant empirical
literature, and the Communication Privacy Management (CPM) Theory, which
provided the theoretical foundation for the study.
Findings relating to the
first objective revealed that although awareness of digital privacy concerns
among Nigerian social media users has increased, familiarity with the specific
provisions of the Nigeria Data Protection Act (NDPA) 2023 remains relatively
low. While many respondents indicated awareness of online privacy risks such as
phishing, cyber fraud, and unauthorised access to personal information, only a
smaller proportion demonstrated adequate knowledge of the legal protections and
rights provided under the NDPA. This finding corroborates Asere, Adenomon, and
Aimufua (2025), who argue that inadequate public sensitisation and low digital
literacy continue to undermine the implementation of data protection policies
in Nigeria. Similarly, Peter and Ndinojuo (2024) found that although Nigerian
social media users are increasingly aware of privacy concerns, many remain
uncertain about the legal and institutional mechanisms available for protecting
their personal data.
From the perspective of
Communication Privacy Management Theory, this finding suggests that although
users recognise the importance of protecting their personal information,
limited awareness of the NDPA restricts their ability to exercise the privacy
rights guaranteed under the law. The theory posits that effective privacy
management depends on individuals' ability to establish and regulate privacy
boundaries. Consequently, inadequate knowledge of existing legal protections
may weaken users' capacity to make informed decisions regarding the disclosure
and management of their personal information.
Regarding the second
objective, respondents generally perceived that social media platforms collect
excessive personal information without adequate transparency or informed
consent. Many also expressed concerns about unauthorised sharing of personal
data and reported experiences involving phishing attempts, fake account
impersonation, and other suspicious online activities. These findings support
the observations of Effoduh and Odeh (2024), who argue that weaknesses in
Nigeria's digital governance framework expose users to surveillance,
exploitation, and misuse of personal information. Similarly, Adeoye (2025)
maintains that although the NDPA strengthened the legal framework for data
protection, concerns about organisational accountability and unauthorised data
processing remain prevalent.
The findings further
indicate that respondents perceived the NDPA as having only moderately improved
the protection of users' privacy on social media platforms. This suggests that
the existence of comprehensive legislation alone may not be sufficient to enhance
public confidence unless supported by effective implementation and regulatory
enforcement. This interpretation is consistent with Alakitan and Makinde
(2025), who argue that the effectiveness of data protection legislation depends
not only on legal provisions but also on ethical governance, institutional
accountability, and compliance by organisations. Within the context of CPM
Theory, these findings reflect Petronio's concept of boundary turbulence,
whereby users' privacy expectations are undermined through unauthorised
disclosure, excessive data collection, and other forms of privacy violation.
With respect to the
third objective, respondents identified weak institutional enforcement, low
public awareness, organisational non-compliance, and technological limitations
as the principal challenges affecting the implementation of the NDPA. These findings
are consistent with Ugbedeojo (2025), who identified inadequate regulatory
capacity, weak compliance culture, and institutional limitations as major
barriers to effective data protection in Nigeria. Likewise, Osimen and
Wonosikou (2025) argue that strong regulatory oversight and institutional
capacity are essential for safeguarding citizens' digital rights. The responses
obtained in this study suggest that these challenges remain particularly
significant in North Central Nigeria, where disparities in digital literacy and
technological infrastructure may influence users' experiences and perceptions
of privacy protection.
From the standpoint of
Communication Privacy Management Theory, these findings demonstrate that
effective privacy management requires both individual awareness and supportive
institutional mechanisms capable of protecting users' privacy boundaries. Although
the NDPA provides legal safeguards for personal data, respondents' perceptions
indicate that weaknesses in enforcement, public awareness, and organisational
compliance continue to limit confidence in its practical implementation.
Overall, the findings
suggest that while the NDPA 2023 provides an important legal framework for
protecting personal data in Nigeria, respondents perceive that its
implementation remains constrained by institutional, technological, and
awareness-related challenges. The study therefore underscores the need for
stronger regulatory enforcement, sustained public sensitisation, improved
organisational compliance, and enhanced cybersecurity capacity to strengthen
the protection of users' privacy on social media platforms, particularly in
North Central Nigeria.
7.0 Conclusion
This study examined
social media users' awareness of the Nigeria Data Protection Act (NDPA) 2023
and their perceptions of its effectiveness in safeguarding personal privacy on
social media platforms in North Central Nigeria. The findings indicate that although
awareness of digital privacy concerns is relatively high, knowledge of the
specific provisions of the NDPA remains limited among many users. Respondents
also perceived that weak regulatory enforcement, low public awareness, poor
organisational compliance, and technological limitations continue to hinder the
effective implementation of the Act. These findings suggest that while the NDPA
2023 provides an important legal and institutional framework for protecting
personal data in Nigeria, its perceived effectiveness depends largely on
stronger institutional enforcement, sustained public sensitisation, improved
organisational accountability, enhanced cybersecurity infrastructure, and
expanded digital literacy initiatives. Strengthening these areas will be essential
to improving public confidence in Nigeria's data protection framework and
enhancing the privacy of social media users.
References
Adeoye, B. (2025). The
legal framework for the protection of users’ data on social media in Nigeria.
SSRN. https://papers.ssrn.com/
Alakitan, M., &
Makinde, E. (2025). Where are the ethical guidelines? Examining the governance
of digital technologies and AI in Nigeria. Policy & Internet. https://doi.org/10.1002/poi3.416
Anigbogu, O. (2025).
Appraisal of the legal framework on data protection in Nigeria and its
implication for right to privacy. SSRN. https://papers.ssrn.com/
Asere, G. F., Adenomon,
M. O., &Aimufua, G. I. O. (2025). The effects of data privacy regulations
on cybersecurity practices in Nigeria and Africa. Journal of Cyberspace
Studies.
Böyük, M. (2025). User
data and digital privacy: Privacy policies of social media platforms. The
Turkish Online Journal of Design, Art and Communication, 15(1), 225–239. https://doi.org/10.7456/tojdac.1569287
Cheng, L., & Guo, Y.
(2025). Privacy protection on social media platforms: Overdisclosure of online
behavioral data is labeling users. International Journal of Digital Law and
Governance, 2(1), 107–133. https://doi.org/10.1515/ijdlg-2025-0001
Chiamogu,
A. P., & Chiamogu, U. P. (2025). From data to dignity:
Rethinking privacy and consent in Nigeria’s digital age. Journal of Science and
Information Technology Research.
Effoduh, O. J., &
Odeh, O. F. (2024). Strengthening data protection: Ensuring privacy and
security for Nigerian citizens.
Onatuyeh,
E. A., Oghorodi, D., Okpako, E. A., & Ojei, E. (2025). Cybersecurity and business survival in Nigeria: Building
customer’s trust. African Journal of Applied Research.
Osimen, G. U.,
&Wonosikou, M. H. (2025). National cybersecurity policy and citizens’
digital rights in Nigeria. African Human Rights Law Journal.
Peter, D. I.,
&Ndinojuo, B. C. E. (2024). Privacy awareness and social media: Personal
data protection among Facebook and Instagram users. Galactica Media: Journal of
Media Studies, 6(3), 168–198. https://doi.org/10.46539/gmd.v6i3.489
Ramadan, G., Risnain,
M., &Nugraha, L. G. (2025). User data protection in the use of algorithms
by social media platforms. Mataram Journal of International Law, 3(2),
107–115. https://doi.org/10.29303/z9ttkc13
Ugbedeojo, S. V. (2025).
Data protection and compliance in Nigeria: Challenges and opportunities.
SSRN. https://papers.ssrn.com/
Xie, J., Wang, X., Liu,
Y., Gong, W., Yan, C., Rafique, W., Khan, M., & Khan, A. A. (2025). Social
media-driven user community finding with privacy protection. Tsinghua Science
and Technology, 30(4), 1782–1792. https://doi.org/10.26599/TST.2024.9010065
Yang, D. (2025).
Application of data privacy protection technology in social media platforms.
Journal of Computer Science and Artificial Intelligence, 2(2), 53–56.
0 Comments