Regulatory enforcement is accelerating. The Nigeria Data Protection Commission (NDPC) now wields administrative penalty powers reaching 2% of annual gross revenue for qualifying non-compliance. Concurrently, AI governance, cross-border data restrictions, and elevated cybersecurity obligations are reshaping the compliance landscape for Nigerian organisations. Treating data protection as peripheral is no longer a viable [...]