Introduction
Since the inception of the Nigeria Data Protection Regulation in
2019 ("the NDPR"), the first principal regulation on data
protection in Nigeria, by the National Information Technology
Development Agency ("NITDA"), the data protection
landscape has been significantly transformed. Data protection has
evolved from an issue that received limited attention into one of
growing importance for regulators, data subjects, processors, and
organisations.
As businesses scale through the application of technological
advancements, which places an increasing reliance on data-driven
business decisions, the processing of personal data has become an
important consideration for stakeholders such as regulators,
businesses (data controllers and processors), and data subjects.
What began as a framework-building phase, in which organisations
were largely encouraged to adopt basic data protection practices,
is now firmly embedded in Nigeria's legal and regulatory
landscape.
