← Legal Portal
🇳🇬

Nigeria Data Protection Act (NDPA), 2023

Act
Nigeria Federal June 12, 2023 Source: Nigeria Data Protection Commission
data protectionprivacypersonal dataNDPRonline businessconsent

Summary (Plain English)

Nigeria's comprehensive data protection law, replacing the earlier NDPR regulation. Establishes the Nigeria Data Protection Commission (NDPC). Requires lawful basis for processing personal data (consent, contract, legal obligation, vital interest, public interest, legitimate interest). Data subjects have rights to: access, rectification, erasure, restriction, portability, and objection. Data controllers must conduct impact assessments for high-risk processing. Cross-border transfer restrictions. Penalties up to 2% of annual gross revenue or NGN 10 million, whichever is greater.

What This Means For You

  • • Lawful basis required for processing personal data
  • • Data subjects can request access, correction, and deletion
  • • Impact assessments required for high-risk processing
  • • Cross-border transfer restrictions apply
  • • Penalties: up to 2% annual revenue or NGN 10M
  • • Nigeria Data Protection Commission oversees enforcement

Original Source

https://ndpc.gov.ng/

Content sourced from Nigeria Data Protection Commission. Always refer to the official document for authoritative text.

Not legal advice. This summary is for informational purposes only. ONIM does not store or republish full legal texts. Always consult a qualified legal professional for advice specific to your situation.