Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 15 DECEMBER 2025

Examining The Concept Of Joint Data Control Under The Nigeria Data Protection Act

ALP NG & Company
Explore more from ALP NG & Company

This collaboration raises a critical question under data protection law: who is responsible for ensuring compliance when two or more entities jointly determine the purposes and means of processing?

NigeriaPrivacy
Adebola Adesida
Adebola Adesida
Oluwatobi Idowu
Oluwatobi Idowu
Author LinkedIn connections

1.0 Introduction

The rise of digital technologies has transformed the way personal data is collected, shared, and utilised. Increasingly, multiple organisations collaborate to process personal data for related purposes. This collaboration raises a critical question under data protection law: who is responsible for ensuring compliance when two or more entities jointly determine the purposes and means of processing?

Joint data control refers to a situation where two or more parties share responsibility for determining the purposes (the "why") and the means (the "how") of personal data processing.1

The Nigeria Data Protection Act, 2023 (NDPA or the "Act") and the General Application and Implementation Directive (GAID) 2025 issued by the Nigeria Data Protection Commission (NDPC) regulates the processing of personal data. They recognize the possibility of joint data control and ensure accountability amongst data controllers involved in the collaboration.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Cross-border Data Transfers And International Compliance: Legal Opportunities In Global Tech Transactions

Nigeria's data protection landscape has fundamentally shifted with the enactment of the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive 2025. This article examines the legal architecture governing cross-border data transfers, identifies critical compliance obligations for international technology transactions, and demonstrates how well-structured data compliance can serve as a competitive advantage in one of Africa's most dynamic digital markets.
NigeriaPrivacy
Gresyndale Legal
Gresyndale Legal
Article

Nigeria's 48-Hour Data Breach Notification Requirement: Regulatory Implications And Comparative Analysis

Nigeria's Internet Code of Practice 2026 introduces a 48-hour breach notification requirement for Internet Access Service Providers, creating a shorter timeline than the Nigeria Data Protection Act 2023 and raising questions about overlapping regulatory obligations. This development reflects a broader global trend toward sector-specific cyber resilience requirements that demand earlier visibility into cyber incidents.
NigeriaPrivacy
Syntegral Legal Practice
Syntegral Legal Practice
Article

Beyond The Pitch: The Intellectual Property Powering The FIFA World Cup 2026

The FIFA World Cup 2026, currently hosted in North America across the United States, Canada and Mexico will generate substantial value from commercial activities including broadcasting rights, sponsorships, merchandising, licensing and digital engagement. These commercial activities are sustained by a network of intellectual property (IP) rights, including trademarks, copyright, patents and image rights.
NigeriaIntellectual Property
ALP NG & Company
ALP NG & Company
Article

Court Of Appeal Affirms Eligibility Of Pre-CAMA 2020 Private Companies To Operate As Single Shareholder Companies

The enactment of the Companies and Allied Matters Act, 2020 (“CAMA 2020”) introduced a significant development in Nigerian corporate law by permitting the incorporation of private companies with a single shareholder1. This represented a departure from the position under the repealed Companies and Allied Matters Act, 1990, which required every company to have a minimum of two shareholders.
NigeriaCorporate/Commercial Law
ALP NG & Company
ALP NG & Company
Article

Participation In The Production Of A Song Does Not, Without More, Confer Co-Authorship Or Co-Ownership: Lessons From Michael Oluwole v. Osinachi Joseph Egbu (Sinach)

Collaboration is an integral feature of modern music production. A commercially successful song may involve songwriters, composers, producers, arrangers, sound engineers, session musicians and other contributors, each performing different functions in bringing a musical project to completion.
NigeriaIntellectual Property
ALP NG & Company
ALP NG & Company