The National Commissioner/CEO of the Nigeria Data Protection Commission (NDPC), Dr Vincent Olatunji, was represented by an officer in the Media Unit, Mr Akintomide Aroso, at the 23rd Annual Conference of the Chartered Institute of Personnel Management of Nigeria (CIPMN), Lagos State Branch.
Mr Aroso facilitated a technical session titled, “Cybersecurity for HR: Protecting People Data in a High-Risk World.” The session focused on personnel managers’ responsibilities under the Nigeria Data Protection Act, 2023. He emphasised cybersecurity governance, lawful processing, data minimisation, and breach response, outlining the benefits of compliance and the legal, operational, and reputational consequences of non-compliance.
Mr Aroso then invited questions and provided clear NDPC-aligned guidance to help participants understand their obligations as data controllers and processors, including consent management, data subject rights, vendor due diligence, and incident reporting. He connected these principles to everyday HR processes such as recruitment, onboarding, payroll, and records management, enabling personnel managers to apply privacy by design, strengthen organisational cybersecurity culture, and ensure continuous compliance.


