nigeria-ndpr
Installation
SKILL.md
Nigeria Data Protection Regulation (NDPR) and Nigeria Data Protection Act (NDPA)
Overview
Nigeria's data protection framework comprises the Nigeria Data Protection Regulation (NDPR) issued by NITDA in January 2019, and the Nigeria Data Protection Act (NDPA) signed into law on June 12, 2023. The NDPA established the Nigeria Data Protection Commission (NDPC) as an independent regulatory body, replacing NITDA's oversight role. The NDPA applies to the processing of personal data by any data controller or processor that is domiciled, resident, or operating in Nigeria, or that processes personal data of data subjects in Nigeria.
Lawful Basis for Processing (NDPA Section 25)
| Lawful Basis | Description |
|---|---|
| Consent | Data subject has given consent to the processing for one or more specific purposes. Must be freely given, specific, informed, and unambiguous. |
| Contract | Processing necessary for the performance of a contract to which the data subject is party. |
| Legal obligation | Processing necessary for compliance with a legal obligation of the controller. |
| Vital interests | Processing necessary to protect the vital interests of the data subject or another natural person. |
| Public interest | Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority. |
| Legitimate interests | Processing necessary for legitimate interests of the controller or third party, provided the interests are not overridden by the data subject's rights. |