Nigeria’s Data Protection Act 2023 and its key provisions
The Nigeria Data Protection Act 2023 was signed into law to protect personal data.
President Bola Ahmed Tinubu has signed the Nigeria Data Protection Act 2023 into law, and the bill is expected to offer a better basis for protecting personal data and ensuring that it does not get into the hands of individuals who should not have it, and making the cross-border transfer of personal data unlawful unless expressly permitted by law.
The new law establishes the Nigerian Data Protection Commission, which will take the role of the existing Nigerian Data Protection Bureau. It defines broad rules for processing personal information, including sensitive information processing, data controller requirements such as data breach notifications, performing Data Protection Impact Assessments (DPIAs), and designating a data protection officer (DPO).
It also defines data subject rights such as the right to object, withdraw consent, data portability, and the right not to be subject to a decision based primarily on the automated processing of personal data.
About author
DW Team
The GIP Digital Watch Observatory team, consisting of over 30 digital policy experts from around the world, excels in the fields of research and analysis on digital policy issues. The team is backed by the creative prowess of Creative Lab Diplo and the technical expertise of the Diplo tech team.