On 11 July 2019, the National Information Technology
Development Agency (NITDA) issued a Press Statement disclosing
its ongoing investigation of alleged breach of data privacy rights
of Nigerians by some identified Data Controllers. NITDA also
released a draft Data Protection Implementation Framework (the
draft framework), which has been made available on its website
for inputs from stakeholders.
Details
In January 2019, NITDA issued the Nigeria Data Protection
Regulations (NDPR). The overall objective of the NDPR is to
safeguard personal data rights, enhance security of transactions
involving personal data and improve the access of Nigerian
companies to cross border data. The NDPR sets out a number of
compliance obligations for Data Controllers, which include the
requirements to do the following:
