Insight type: Article

Business organisations often find themselves in situations where they may need to collect personal data beyond that of a data subject. A common example is where a data subject is filling out a form and an employer requires the data subject to provide the name, phone number, address, and other contact details of their next of kin for emergency purposes or payment of certain benefits. The effect of this is that the employer now has personal data belonging to an employee’s next of kin without having collected it directly from the next of kin. The collection of the data of the next of kin is deemed as an indirect collection of personal data. Ideally, when processing personal data, it must be clear to the data subject that personal data concerning them are collected, used, consulted, or otherwise processed, and to what extent the personal data will be, processed.

Over the course of a business arrangement, organisations often need to share and transfer data to various third parties in order to carry out the transaction. Almost every business relies on third parties to process personal data.

Over the course of a business arrangement, organisations often need to share and transfer data to various third parties in order to carry out the transaction. Almost every business relies on third parties to process personal data.

The Federal Government of Nigeria (FGN) through the Rural Electrification Agency (REA) has invited interested Solar PV Mini-Grid developers to participate in the Africa Mini-grids Program (AMP) aimed at supporting access to clean energy by increasing financial viability and promoting scaled-up commercial investment in low-carbon mini-grids. The AMP which is active in 21 African countries is funded by the Global Environment Facility (GEF) and implemented by the United Nations Development Programme (UNDP), the Rocky Mountain Institute (RMI), and the African Development Bank (AfDB).

Over the past few weeks, the ALN Nigeria PrivacyPlease series has provided a detailed analysis of some key provisions in the Nigeria Data Protection Act (NDPA) 2023. So far, we have discussed the introduction of a ‘New Categorisation of Data Controller/Processor & the Duty to Register as a Data Controller and Processor of Major Importance’ and ‘Cross-Border Transfer of Personal Data.’

Cross-border transfer of personal data simply means the sharing of personal data from one national jurisdiction to another. The expansion of the internet in the 21st century means that a number of international organisations can share all sorts of information including personal data seamlessly across various countries. The protection of personal data that will be transferred and processed in another country is often a key issue. This article offers useful insights into key considerations for the cross-border transfer of personal data under Nigerian privacy laws.

Tanzania presents abundant investment opportunities, including in sectors where land is an important resource, such as agriculture, projects and infrastructure, real estate and construction, manufacturing, and other capex-heavy industries. 

In this article, Daniel Ngumy, Kenneth Njuguna and James Karanja of ALN Kenya talk to Bloomberg Tax as they analyse tax measures in the recent Kenya Finance Bill that will impact multinationals and other businesses operating across various sectors.

Africa’s dispute resolution landscape has long been dominated by litigation, but the use of alternative mechanisms such as arbitration and mediation is becoming more prevalent.

 

 

 

The current trends on the continent have an increased focus on sustainability with many African countries recognising the importance of sustainability and ESG practices and governments enacting legislation and regulations to address these challenges.