‘For Nigeria to fully realise its digital potential, privacy must be treated as an economic enabler’

In an era where data drives economies, Tosin Alabi is at the forefront of helping Nigerian businesses navigate the fast-changing world of data privacy, cybersecurity, and governance. As the founder and CEO of Tozapro, a leading data privacy consulting firm, Alabi helps organisations protect sensitive information, comply with global regulations, and build digital trust. A lawyer by training, Alabi holds a Law degree from Obafemi Awolowo University, a Master’s in Data Privacy Law from Drexel University, Philadelphia, Pennsylvania, and a Ph.D. in Cybersecurity and Artificial Intelligence from the University of the Cumberlands, Kentucky, USA. In this interview with KENNETH ATHEKAME, Alabi discusses the future of data privacy, the impact of AI, and why trust, not just technology, will define Nigeria’s digital transformation. Excerpts:

How has your legal and technical expertise shaped your approach to privacy consulting in Nigeria?

My background in both law and technology gives me a 360degree view of data privacy. From the legal perspective, I understand compliance, regulation, and the protection of individual rights. From the technical side, I know how systems actually work, how data is collected, stored, and shared. This combination allows me to bridge the gap between policy and practice. In Nigeria, where many organisations are still building their privacy frameworks, this approach helps me guide them beyond just drafting policies to embedding privacy into the design of their products and systems.

What inspired you to establish Tozapro, and what gaps are you addressing?

Tozapro was created to fill a gap I noticed in the global privacy landscape. Many companies had either legal advisors or IT experts, but very few professionals who could connect privacy law with business realities. I wanted to create a firm that helps organizations see privacy not just as a compliance burden, but as a growth and trust enabler. Beyond consulting, Tozapro is also a mentorship platform where we’ve helped many young professionals transition into careers in data privacy and cybersecurity.

You’ve often described data as “the new oil.” How does privacy fit into Nigeria’s digital transformation?

Nigeria’s digital economy thrives on data from fintech to e-commerce. But like crude oil, mishandled data can cause serious damage: breaches, fraud, and loss of trust. Strong privacy practices ensure that data is refined, safeguarded, and used responsibly. If Nigeria wants to fully realise its digital potential, privacy must be treated as an economic enabler not just a legal checkbox. A trusted data ecosystem will attract investors, inspire innovation, and make Nigeria a true digital leader in Africa.

How prepared are Nigeria’s fintech and digital health sectors to tackle cybercrime?

These sectors are fast-growing but also highly vulnerable. Some companies have built strong privacy frameworks with encryption, consent, and data governance. But many others remain reactive; they only respond after an incident.

The $500 million lost to cybercrime in 2022 shows the urgency. True preparedness requires more than firewalls; it demands privacy governance, staff awareness, and collaboration with regulators. Privacy must be viewed as part of an organization’s infrastructure, just like payment systems or hospital equipment.

How does strong governance help attract investment?

Investors want confidence that their money is going into a stable, trustworthy environment. A strong privacy and governance framework signals that an organization upholds global standards and protects users.

For Nigeria, building privacy into our digital systems sends a clear message to international partners: this is a safe place to do business. That’s how we attract sustainable investment and build credibility on the global stage.

How effective have the NDPR and the Nigeria Data Protection Commission been?

The NDPR was a milestone when introduced in 2019 it put data privacy on Nigeria’s policy map. The establishment of the Nigeria Data Protection Commission further signaled government commitment.

However, enforcement is still inconsistent. Many organizations don’t fully comply, and awareness among SMEs is low. To improve effectiveness, we need stronger enforcement, simpler sector-specific guidelines, and closer collaboration between regulators and industry players.

How can Nigerian companies move from “check-the-box” compliance to privacy-by-design?

Privacy-by-design means integrating privacy from the start, not adding it later. For Nigerian companies, it begins with a leadership mindset. Executives must view privacy as a business value, not a legal or IT task. Fintechs can design apps that request only essential data, and hospitals can anonymize patient information. Embedding privacy isn’t about paperwork; it’s about earning user trust and trust is priceless.

With rapid AI adoption, how should Nigerian regulators balance innovation with data protection?

AI is transforming finance, healthcare, and advertising, but it’s also data-hungry. Regulators should encourage innovation while setting clear boundaries, transparency in data use, strong consent protocols, and audits for high-risk systems.

If we get this balance right, Nigeria can become a hub for ethical AI development, building models that respect privacy and align with our cultural and regulatory realities.

Where do you see the biggest intersection between AI and data privacy in Nigeria’s economy?

The most critical intersections are in financial services and healthcare. Fintechs use AI for fraud detection, and hospitals are adopting AI for diagnostics both depending on sensitive data.

The challenge is ensuring innovation doesn’t compromise privacy. Fraud detection AI must avoid profiling customers unfairly, and healthcare AI must protect patient confidentiality. Done responsibly, AI can actually enhance both privacy and security.

What are the biggest challenges in building a skilled privacy and cybersecurity workforce in Nigeria?

The talent gap is significant. Many young people are eager to join the field, but structured training and mentorship opportunities are scarce. Universities also struggle to keep curricula up to date with global trends. At Tozapro, we focus on building well-rounded professionals who understand the intersection of law, business, and technology because privacy is not just technical; it’s strategic.

Why is youth empowerment central to your mission at Tozapro?

If we don’t invest in our youth, we’ll end up importing talent. At Tozapro, we’ve mentored and trained hundreds of young professionals who now work in global privacy roles or lead data protection units in Nigeria.

For me, it’s not just about creating experts; it’s about nurturing leaders who will shape policy, drive innovation, and inspire others.

How do you see Nigeria’s data privacy landscape evolving in the next five years?

I see Nigeria moving from awareness to maturity. Right now, many companies are still learning, but as enforcement strengthens, privacy will become a competitive advantage.

We’ll see startups adopting privacy-by-design, global firms demanding compliance from Nigerian partners, and a growing pool of skilled professionals. Nigeria can absolutely become Africa’s hub for privacy excellence.

What policy or industry changes are most urgent if Nigeria wants to lead Africa’s digital economy?

Two things: stronger enforcement and sector-specific frameworks. Without accountability, regulations are just words. And each sector of fintech, healthcare, and education faces unique privacy risks that need tailored policies. Beyond regulation, collaboration is key. When the public and private sectors align on privacy, Nigeria becomes a trusted partner for global digital business.

Finally, what advice would you give Nigerian startups about embedding trust and privacy into their growth strategy?

For startups, privacy should never be an afterthought. The earlier you embed it into your products and culture, the easier and cheaper it becomes.

Don’t collect data just because you can collect what you need, protect it, and be transparent with your users. In today’s digital economy, trust is your biggest currency. A single breach can destroy it overnight, but a reputation for protecting customers can unlock global opportunities.