INTRODUCTION
In our increasingly digital world, data breaches have become a
significant concern for businesses worldwide, and Nigeria is no
exception. The surge in digital platform usage and data
proliferation has heightens the risk of unauthorized access to
personal data. To address these challenges and protect personal
data, the Nigeria Data Protection Act 2023 ('NDPA" or
"the Act') was enacted, building on the foundational
principles set by the Nigeria Data Protection Regulation (NDPR) of
2019.
The NDPA and the NDPR outline stringent obligations for
organizations to ensure both the lawful processing of personal data
and its protection, along with outlining responsibilities in the
event of a data breach. Given that data breaches can result in
severe and irreparable financial, legal, and reputational harm to
data subject, it is essential for data controllers1 and
data processors2 in Nigeria to create and implement
effective data breach response strategies to
