Nigeria Gets a New Data Protection Law as Tinubu Signs Bill into Law
Nigeria has joined the league of countries that have enacted data protection laws to safeguard the privacy and security of personal information.
President Bola Tinubu has signed the Nigeria Data Protection Bill, 2023 into law, creating the Nigeria Data Protection Act, 2023.
The new law provides a legal framework for the protection of personal information and the practice of data protection in Nigeria. It also establishes the Nigeria Data Protection Commission (NDPC), a regulatory body that will oversee the implementation and enforcement of the law.
The NDPC will be headed by a National Commissioner, who will be responsible for regulating the processing of personal information by public and private entities.
The NDPC will also issue guidelines, standards and codes of conduct for data protection, as well as handle complaints and impose sanctions for violations.
The Nigeria Data Protection Act, 2023 replaces the Nigeria Data Protection Bureau (NDPB), which was established by former President Muhammadu Buhari in February 2022.
The NDPB was an interim body that was tasked with developing a data protection policy and preparing a bill for the establishment of a permanent commission.
The bill was sent to the Senate and House of Representatives for consideration and passage on April 4, 2023 by former President Buhari. It was passed by both chambers and transmitted to President Tinubu for assent.
The signing of the bill into law was confirmed by Dr Vincent Olatunji, the National Commissioner of the NDPB, at a workshop in Abuja. He said the new law will enhance the protection of personal information and promote trust and confidence in the digital economy.
The Nigeria Data Protection Act, 2023 is expected to align with global best practices and standards, such as the General Data Protection Regulation (GDPR) of the European Union. It will also boost Nigeria’s chances of becoming a member of the Global Privacy Assembly (GPA), an international forum of data protection authorities.
The new law will have implications for individuals and organizations that collect, store, use or share personal information in Nigeria. They will have to comply with the principles and obligations of data protection, such as obtaining consent, ensuring accuracy, security and confidentiality, and respecting the rights of data subjects.
The new law will also create opportunities for businesses and professionals in the data protection sector, such as data protection officers, consultants, auditors and trainers. They will be able to provide services and solutions to help organizations comply with the law and achieve data protection compliance.
The signing of the Nigeria Data Protection Act, 2023 is a milestone achievement for Nigeria’s digital transformation agenda. It is also a welcome development for Nigerians who value their privacy and security in the digital age.