On January 25, 2019, Nigeria's National Information
Technology Development Agency ("NITDA") issued the Nigeria Data Protection Regulation 2019 (the
"Regulation"). Many concepts of the Regulation mirror the
EU General Data Protection Regulation ("GDPR").
Key elements of the Regulation include:
- Application: The Regulation applies to all
residents of Nigeria, all citizens of Nigeria residing outside of
Nigeria and all organizations processing personal data of such
individuals.
- Data Processing Principles: Personal data may
only be processed if at least one of five legal bases are met: (1)
the data subject provides consent, or if the processing is
necessary; (2) for the performance of a contract; (3) to meet a
legal obligation; (4) to protect the vital interests of the data
subject; or (5) for the performance of a task carried out in the
public interest.
