Professional Evaluation of Compliance with Nigeria Data Protection Regulation Requirements Among Fintech Companies Operating in Lagos State

Nigeria's fintech sector processes large volumes of personal and financial data under regulatory obligations established by the Nigeria Data Protection Act 2023 and its predecessor regulation, and the compliance status of fintech companies in Lagos State requires independent professional evaluation. This study professionally evaluates compliance with Nigeria Data Protection Act 2023 requirements among fintech companies operating in Lagos State. A compliance audit methodology drawing on the NDPA 2023 compliance requirements and the Nigeria Data Protection Commission audit guidelines was applied to ten Lagos-based fintech companies representing varying sizes and service categories, combining document review of privacy notices, data processing agreements, data breach procedures, and DPO appointment records with structured compliance interviews of 30 data protection and legal officers. Compliance was scored across eight requirement areas: lawful basis for processing, consent management, data subject rights implementation, data breach notification, DPO appointment, cross-border transfer controls, data retention policies, and processor contract management. Descriptive compliance scoring and gap analysis were applied. Available data protection compliance literature from Nigerian fintech contexts identifies inadequate consent management mechanisms and inconsistent data breach notification procedures as the most prevalent compliance gaps. The NDPA 2023 Framework and NDPC enforcement guidelines provide the professional reference. Findings indicate that large fintechs achieve significantly higher compliance scores than micro-fintechs, particularly in cross-border data transfer controls and DPO appointment. Recommendations address a tiered compliance framework for micro-fintechs and NDPC-sponsored compliance training for small fintech operators. Keywords: data protection, NDPA 2023, fintech compliance, Lagos State, Nigeria.