An Overview Nigeria’s Data Protection Act 2023

For a better understanding of the Act, we have prepared an overview of some of the salient provisions in the Act:

Introduction
The draft Data Protection Bill was introduced by the National Data Protection Bureau (NDPB) on 4 October 2022 and was approved by the Federal Executive Council in February 2023. The bill was assented into law and formally became the Nigeria Data Protection Act 2023 on Tuesday 12 June 2023, by President Bola Ahmed Tinubu.

Scope
The Act applies to processing personal data within Nigeria or processing personal data of a subject in Nigeria by both foreign and local data controllers and processors. Irrespective of whether the processing is by automated means.

The Act does not apply to the processing of personal data that is done solely for personal and/or household purposes, subject to the fundamental right to privacy of a data subject. It further includes a number of limited exceptions.

Key Highlights
Introduction of New Categorisation of Data Controller/Processor and Duty to Register as a Data Controller and Processor:

The Act introduces a new classification of data controllers and processors i.e., “Data Controllers and Data Processors of major importance” (DCPMI) with compulsory registration obligations with the Commission where they meet the threshold for such registration.

Click here to read and download the full alert.

Should you have any questions regarding this legal alert do not hesitate to contact Sumbo Akintola.

_____________

Contributors

1. Emmanuel Ido – Associate
2. Olawale Adedipe – Associate
3. Timothy Ogele – Associate
4. Uchechi Ofoegbu – Associate
5. Moyinoluwa Jemiriye – Associate