On Friday, March 13, 2026, the Nigeria Data Protection Commission (NDPC)—Nigeria’s data protection regulator—issued a stern public warning that could reshape how content is created across Nigerian social media.
The message:
Filming or photographing unsuspecting members of the public without their consent and sharing the footage on TikTok, Instagram, X, Facebook, or YouTube violates Nigerian law—specifically:
- Section 37 of the 1999 Constitution (right to privacy)
- Nigeria Data Protection Act (NDPA), 2023 (informational self-determination)
Who the warning targets:
- Content creators filming strangers on streets, in markets, at bus stops
- “Reality show” style creators capturing random people without permission
- Prank channels recording unsuspecting victims
The trigger incident:
A Lagos-based content creator standing at roadsides filming passersby for a “reality show” distributed online. NDPC called it “wilful invasion of citizens’ privacy” that serves “neither a public nor a legitimate interest.”
The consequences:
- Individual creators: Criminal prosecution under NDPA
- Platforms (TikTok, X, Meta): Sanctions if they fail to enforce community guidelines
- No exceptions: Processing personal data (images, video, likeness) requires consent unless a lawful basis exists
Dr. Vincent Olatunji, National Commissioner and CEO of NDPC, directed platforms to “step up enforcement of community guidelines” or face sanctions.
Babatunde Bamigboye, Head of Legal, Enforcement and Regulation at NDPC, was clear: “Content creators may be liable to criminal prosecution for violating the privacy rights of citizens and other data subjects in Nigeria.”
This isn’t guidance. It’s a regulatory warning with enforcement teeth. And it fundamentally changes what Nigerian content creators can film, share, and monetize.
What the Law Actually Says: Section 37 + NDPA 2023
The NDPC warning isn’t inventing new law. It’s enforcing existing constitutional and statutory protections that most content creators either don’t know about or have been ignoring.
1. Section 37 of the 1999 Constitution (Right to Privacy)
“The privacy of citizens, their homes, correspondence, telephone conversations and telegraphic communications is hereby guaranteed and protected.”
This provision establishes a fundamental right to privacy in Nigeria. Courts have interpreted this broadly to include:
- Privacy of personal information
- Privacy of image and likeness
- Protection from unwanted public exposure
2. Nigeria Data Protection Act (NDPA), 2023
The NDPA, which came into force in 2023, defines “personal data” as:
“Any information relating to an identified or identifiable natural person.”
This includes:
- Photographs
- Video footage
- Voice recordings
- Biometric data (facial recognition, gait analysis)
- Location data
Processing personal data (which includes capturing, storing, sharing, or publishing) requires:
- Consent from the data subject, OR
- Another lawful basis (public interest, legitimate interest, legal obligation, vital interests, contractual necessity)
Key NDPA provisions:
- Section 2(1): Data must be processed lawfully, fairly, and transparently
- Section 5: Consent must be freely given, specific, informed, and unambiguous
- Section 65: Violations can result in criminal penalties (fines, imprisonment)
What This Means for Content Creators:
If you film someone in public and post it online:
- You are processing their personal data (their image, likeness, potentially voice)
- You need consent (unless you can prove another lawful basis)
- “They’re in public” is NOT a defense under NDPA
- “It’s for entertainment” is NOT a lawful basis
NDPC’s position:
“Processing the images of people requires consent unless the creator can justify the action under other lawful bases of data processing.”
Translation: Get permission. Or don’t publish.
The Lagos “Reality Show” Case: Why NDPC Acted Now
NDPC’s warning was triggered by a specific case involving a Lagos content creator.
What happened:
- Content creator stands at roadsides in Lagos State
- Films unsuspecting members of the public passing by
- Creates “reality show” style content from the footage
- Posts videos on TikTok, Instagram, or other platforms without subjects’ consent
NDPC’s assessment: “Preliminary investigation by the Commission reveals that this wilful invasion of citizens’ privacy serves neither a public nor a legitimate interest. The data subjects involved have no expectation that their images will be captured and shared with the whole world by an unknown individual.”
Why this matters:
The creator likely believed:
- Public spaces = no privacy expectation
- Entertainment value = legitimate use
- Viral content = fair game
NDPC says: All three assumptions are wrong.
Public spaces don’t eliminate privacy rights. Just because someone is walking on a Lagos street doesn’t mean they’ve consented to be filmed, identified, and broadcast to millions.
Entertainment is not a lawful basis for data processing. NDPA recognizes six lawful bases (consent, legal obligation, vital interests, public interest, legitimate interest, contractual necessity). “I want to make a funny video” isn’t one of them.
Virality doesn’t justify violation. The fact that content gets views doesn’t make it lawful.
The Platform Directive: TikTok, X, Meta Must Enforce—Or Face Sanctions
NDPC didn’t just warn creators. It directed platforms to act.
Dr. Vincent Olatunji’s directive:
Platform owners—TikTok, X (formerly Twitter), and Meta Platforms (Facebook, Instagram, WhatsApp)—must “step up enforcement of community guidelines” to prevent harm from unlawful data processing.
What this means:
- Platforms must moderate content that violates Nigerian privacy law
- Take down videos/images posted without consent
- Respond promptly to privacy complaints from Nigerians
- Strengthen automated detection of privacy violations
The threat:
“Where a platform owner fails or neglects to act timeously in addressing harms, the Commission will not hesitate to impose appropriate sanctions under the NDP Act.”
What sanctions could include:
- Fines (NDPA allows penalties up to 2% of annual gross revenue or ₦10 million, whichever is higher)
- Operational restrictions (limits on data processing in Nigeria)
- Orders to block content or suspend accounts
- Public naming and shaming (reputational damage)
This puts platforms in a difficult position. They must:
- Understand Nigerian privacy law (NDPA 2023)
- Build moderation capacity to detect privacy violations
- Respond to complaints from Nigerian users
- Balance free expression with privacy rights
For TikTok especially, this is critical. The platform’s algorithm rewards street-style content (high engagement, viral potential). Nigerian creators have built massive followings filming strangers, reactions, pranks.
Now NDPC is saying: That content may be illegal. And if you don’t moderate it, we’ll sanction you.
What Content Creators Can (and Can’t) Film Without Consent
The warning doesn’t ban all public filming. But it creates clear guardrails.
What You CAN Film (Without Consent):
1. Public events with no expectation of privacy
- Political rallies, concerts, festivals where attendees expect to be recorded
- News coverage of breaking events (journalism has public interest justification)
- Crowds at sporting events
2. Incidental inclusion
- Someone walks through your background while you’re filming yourself
- Bystanders in wide-angle establishing shots
- But: If you focus on them, zoom in, or make them the subject, you need consent
3. Legitimate public interest
- Documenting government actions, protests, public officials performing duties
- Investigative journalism exposing wrongdoing
- Must meet high bar for “public interest”
What You CAN’T Film (Without Consent):
1. Individuals as primary subjects
- Close-ups of random people
- Interviews without permission
- “Man on the street” reactions
2. Entertainment/comedy content
- Pranks targeting strangers
- “Reality shows” filming unsuspecting people
- Reaction videos where subjects don’t know they’re being recorded
3. Commercial content
- Advertising featuring people without permission
- Monetized videos where subjects generate revenue for creator
4. Children
- Extra protection: NDPA has specific provisions for minors
- Filming children without parental consent is high-risk
Gray Areas:
Street photography/videography for art:
- If genuinely artistic and subjects aren’t identifiable → possibly defendable under legitimate interest
- If subjects are identifiable and recognizable → consent required
Blurred faces:
- Blurring faces reduces (but doesn’t eliminate) privacy concerns
- Still captures gait, clothing, location → could still be identifiable
- Safer than unblurred, but consent is still best practice
How to Get Consent (The Right Way)
If you’re a Nigerian content creator who films public content, here’s how to comply:
1. Verbal Consent (Minimum)
- Approach person before filming
- Explain what you’re doing: “I’m making a video for TikTok about [topic]”
- Ask: “Can I film you and post it online?”
- Record their verbal “yes” on camera (proof of consent)
2. Written Consent (Better)
- Use a simple consent form (model release)
- Explain how footage will be used
- Get signature or digital acknowledgment
- Keep records
3. On-Camera Acknowledgment (Best)
- Film the person acknowledging consent: “Yes, I agree to be in this video”
- Captures consent and demonstrates transparency
- Creates audit trail
What Consent Must Include:
- Who you are (creator, platform, channel name)
- What you’re filming (topic, purpose)
- Where it will be shared (TikTok, Instagram, YouTube, etc.)
- How they can withdraw consent (contact info)
The Enforcement Question: Will NDPC Actually Prosecute?
NDPC’s warning raises the obvious question: Will they actually enforce this?
Evidence they’re serious:
1. NDPC has enforcement history
- Since its creation in 2023, NDPC has:
- Fined data controllers for violations
- Issued compliance orders
- Conducted audits and investigations
- Publicly named non-compliant entities
2. The warning is specific
- Names a specific case (Lagos roadside creator)
- Cites exact legal provisions (Section 37, NDPA)
- Directs platforms by name (TikTok, X, Meta)
- States consequences (criminal prosecution, sanctions)
3. International precedent
- GDPR in Europe has prosecuted individuals for privacy violations
- UK ICO fined companies for unlawful processing
- Nigerian regulators (FCCPC, CBN) have shown willingness to sanction violators
Challenges to enforcement:
1. Scale
- Thousands of Nigerian creators post daily
- NDPC has limited staff to monitor all content
2. Jurisdictional complexity
- Platforms are foreign companies
- Enforcement across borders is difficult
3. Public perception
- Street-style content is popular
- Nigerians may see enforcement as overreach
Most likely outcome:
- NDPC will make examples of high-profile violators
- Platforms will quietly increase moderation to avoid sanctions
- Creators will self-censor to avoid risk
- Gray area content continues but with more consent practices
The Broader Trend: Nigeria Tightening Digital Governance
NDPC’s content creator warning isn’t isolated. It’s part of Nigeria’s broader push to regulate digital spaces:
Recent regulatory actions:
1. FCCPC Digital Lending Crackdown (2025)
- Blacklisted 45 illegal loan apps
- Enforced DEON Regulations
- Recovered ₦10 billion for consumers
2. LASU Content Creator Regulations (Jan 2026)
- Lagos State University banned “street-style” prank content on campus
- Followed pandemonium from viral prank videos
3. CBN Automated AML Mandate (March 2026)
- Required all financial institutions to deploy AI-driven compliance systems
4. NBC Broadcasting Code Updates
- National Broadcasting Commission tightening online content rules
The pattern: Nigerian regulators are no longer treating digital spaces as lawless frontiers. They’re applying:
- Constitutional protections (privacy, dignity)
- Statutory frameworks (NDPA, consumer protection laws)
- Enforcement mechanisms (sanctions, prosecution)
For content creators, this means the “Wild West” era of Nigerian social media is ending.
The Verdict: Privacy Rights Trump Viral Content
NDPC’s warning is clear: Nigerian law protects privacy. Viral content doesn’t override constitutional rights.
For content creators:
- Get consent before filming strangers
- Use written releases when possible
- Blur faces if you can’t get permission
- Understand NDPA requirements
For platforms:
- Strengthen content moderation for Nigerian users
- Build privacy violation detection systems
- Respond to Nigerian privacy complaints promptly
- Or face NDPC sanctions
For the public:
- You have a right to privacy, even in public spaces
- If someone films you without permission and posts it online, you can report to NDPC
- Platforms must respond to privacy complaints
The broader message:
Nigerian law recognizes informational self-determination—your right to control how your personal data (including your image) is used. Content creators who ignore that do so at their own legal risk.
Dr. Vincent Olatunji’s warning is unambiguous:
“Content creators may be liable to criminal prosecution for violating the privacy rights of citizens.”
That’s not a suggestion. It’s a promise.
Nigerian content creators built massive audiences by filming strangers. Now NDPC is saying: Get consent, or face prosecution.
The era of consent-free street content in Nigeria is over.
NDPC’s public warning was issued Friday, March 13, 2026, by Babatunde Bamigboye (Head of Legal, Enforcement and Regulation). Dr. Vincent Olatunji is National Commissioner and CEO of the Nigeria Data Protection Commission.
