Summary
The Nigeria
Information Technology Development Agency (NITDA) has disclosed
its intention to issue non-compliance notices to companies and
organizations that have failed to comply with the Nigeria Data
Protection Regulation (NDPR), 2019. In a recent public statement,
the Desk Officer, e-Government Development and Regulation
Department at NITDA revealed that the agency would soon notify the
first batch of 100 non-compliant companies. According to the
report, the companies on the list, include those in the financial
technology (Fintechs), betting and aviation sectors, among
others.
Details
In January 2019, NITDA issued the NDPR to regulate organizations
that collect and process personal data of individuals (Data
Controllers) as well as sanction non-compliance with the
Regulation. The NDPR imposes obligations on Data Controllers to
conduct a mandatory data protection audit of their organization and
file the audit report with the NITDA through a Data
