EXPLORING DATA PROTECTION LAWS AND PRACTICES IN NIGERIA: A COMPREHENSIVE ANALYSIS

Abstract

Data protection has become a paramount concern in Nigeria, particularly as the country continues to embrace digital transformation and technological advancements. With the increasing reliance on digital platforms for business, governance, and communication, the protection of personal data has become essential to safeguarding privacy and ensuring trust in the digital ecosystem. This paper provides an overview of the data protection laws in Nigeria, focusing on the regulatory framework that governs the collection, processing, and storage of personal data. The primary legislations, the Nigeria Data Protection Regulation (NDPR), 2019 and the Data Protection Act, 2023, serve as the cornerstone of data protection in the country, outlining the rights of individuals and the obligations of organizations to ensure data security. In addition the paper also expatiates on other relevant legal provisions, the principles guiding the processing and protection of data in Nigeria including sector-specific regulations, and discusses the roles of regulatory bodies in enforcing compliance. Ultimately, this paper explains the rules and regulations formulated by the Nigerian government to ensure effective implementation and enforcement of data protection laws to create a secure, ethical, and privacy-respecting digital environment in Nigeria.

Keywords: Data Protection, Data Processing, Data Subjects, Data Controllers, Data Processors, Data Protection Compliance Organisations, Data Audit