{Nigeria Data Protection Regulation (NDPR)}
- Why was NDPR created?
- To safeguard the rights of natural persons to data privacy.
- To foster safe conduct for transactions involving the exchange of Personal Data.
- To prevent unauthorized and criminal use of Personal Data.
- Scope
The NDPR applies to:
- Nigerian citizens, regardless of where they reside
- Residents of Nigeria
- Nigerian citizens, regardless of where they reside
- Requirements
The NDPR requires that personal data be processed in accordance with a specific, legitimate, and lawful purpose. It also introduces new restrictions on the collection and processing of personal data.
- Penalties
Breaches of data privacy rights can result in:
- Fines of up to N10M or 2% of the previous year’s annual gross revenue, whichever is higher
- Negative publicity and damage to brand and reputation
- Fines of up to N10M or 2% of the previous year’s annual gross revenue, whichever is higher
- ImplementationThe National Information Technology Development Agency (NITDA) developed an implementation framework to help data controllers and administrators comply with the NDPR. The Nigeria Data Protection Bureau (NDPB) was established in 2022 to implement the NDPR
- To ensure that Nigerian businesses remain competitive in international trade through the safe guards afforded by a just
and equitable legal regulatory framework on data protection and which is in tune with best practice
Send a question to an expert
