Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 03 SEPTEMBER 2019

Implementing The 2019 Nigeria Data Protection Regulations – An Overview Of The Draft Implementation Framework

AELEX
AELEX
Contributor
Explore more from AELEX

With more organisations migrating their functionalities online, the NDPR issued by the National Information Technology Development Agency on the 25th of January 2019, could not have come at a more crucial time.

NigeriaPrivacy
Kanyinsola Ojeshina
Kanyinsola Ojeshina
Florence Bola-Balogun
Florence Bola-Balogun
Author LinkedIn connections

With more organisations migrating their functionalities online, the Nigerian Data Protection Regulations ("NDPR") issued by the National Information Technology Development Agency ("NITDA") on the 25th of January 2019, could not have come at a more crucial time.

Further to the NDPR, and on recommendations by stakeholders, NITDA on 11th July 2019 released a draft implementation framework ("Draft Framework") informing individuals and corporations of the compliance requirements1.

We considered the NDPR in a previous article here and now examine some of the notable provisions of the Draft Framework below. 

1. Appointment of Data Protection Compliance Organizations ("DPCOs").2

The NDPR requires organisations to carry out an audit of their data protection practices3. The Draft Framework has now provided that the audit would be conducted by the DPCOs who have been licensed by NITDA and are published on the NITDA website.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Cross-border Data Transfers And International Compliance: Legal Opportunities In Global Tech Transactions

Nigeria's data protection landscape has fundamentally shifted with the enactment of the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive 2025. This article examines the legal architecture governing cross-border data transfers, identifies critical compliance obligations for international technology transactions, and demonstrates how well-structured data compliance can serve as a competitive advantage in one of Africa's most dynamic digital markets.
NigeriaPrivacy
Gresyndale Legal
Gresyndale Legal
Article

Nigeria's 48-Hour Data Breach Notification Requirement: Regulatory Implications And Comparative Analysis

Nigeria's Internet Code of Practice 2026 introduces a 48-hour breach notification requirement for Internet Access Service Providers, creating a shorter timeline than the Nigeria Data Protection Act 2023 and raising questions about overlapping regulatory obligations. This development reflects a broader global trend toward sector-specific cyber resilience requirements that demand earlier visibility into cyber incidents.
NigeriaPrivacy
Syntegral Legal Practice
Syntegral Legal Practice
Article

Nigeria's 15% Minimum Effective Tax Rate (Metr): Analysis For Multinational Enterprises And Large Domestic Companies

A major innovation introduced by the Nigeria Tax Act (the “NTA”) is the 15% Minimum Effective Tax Rate (the “METR”), which represents a fundamental shift in Nigeria’s corporate tax framework. The METR is intended to guarantee that companies of significant economic scale bear a minimum tax burden, notwithstanding the availability of incentives, exemptions, or reliefs.
NigeriaTax
AELEX
AELEX
Article

Innovative Trade Finance: Promoting Inclusivity, Resilience And Interoperability Through Digitalisation

The increasing digitalisation of global commerce fundamentally transforms how Trade Finance is deployed and accessed by businesses. The International Chamber of Commerce (“the ICC”) defines Trade Finance as the invisible bridge that makes global trade flow. Trade Finance connects entities across continents, mitigates payment risks and is enzymatic to market progression and economic stability.
NigeriaInternational Law
AELEX
AELEX
Article

Data Localisation In Nigeria: Separating Myth From Reality

Artificial intelligence, cloud computing, cybersecurity and digital sovereignty have fundamentally changed the way governments think about data. Around the world, policymakers are increasingly asking where data should be stored, who should have access to it and under what circumstances it should leave national borders. These questions are no longer confined to technology policy, they have become matters of economic policy, national security, industrial development and international trade.
NigeriaTechnology
AELEX
AELEX