Nigeria
Legal Basis
The NDPA recognizes "legitimate interest" as a legal basis for processing personal data.
Data Portability
The right to data portability is removed, with the option for future reinstatement by the Data Protection Commission.
Data Controller/Processor of Major Importance
DCMIs/DPMIs must appoint a data protection officer, register with the NDPC, and face higher fines for breaches.
Children’s Data
Consent for processing a child's data must come from a parent or guardian. Age and consent verification must use government-approved identification.
Regulatory Authority
The Act’s objectives include protecting personal information, promoting data security and privacy, and providing recourse and remedies for rights breaches. It also aims to strengthen the legal foundations of Nigeria’s digital economy and ensure the country’s participation in regional and global economies through the trusted use of personal data. The Act establishes the Nigeria Data Protection Commission to ensure enforcement.
Dr Vincent Olatunji – National Commissioner / CEO
Nigeria Data Protection
Commission
The National Data Protection Commission (NDPC) is a statutory Nigerian organization that is responsible for the regulation of data privacy in Nigeria. It was created by the Nigeria Data Protection Bureau (NDPB) in February 2022, as a mandate to oversee the implementation of the Nigeria Data Protection Regulation (NDPR) which was issued by National Information Technology Development Agency (NITDA) in 2019 as a subsidiary legislation of NITDA Act, 2007
