🇳🇬
Nigeria
Nigeria Data Protection Regulation (NDPR)
Africa🟡 Moderate
Compliance Score
57%
8 Addressed
5 Partial
1 None
Authority
Nigeria Data Protection Bureau (NDPB)
Overview
Nigeria's NDPR, effective 2019, is a moderate framework that applies to all organizations processing personal data. The NDPB is the regulatory authority responsible for enforcing compliance.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
PartialPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
NoneData Localisation
PartialSignificant Data Fiduciary
PartialGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Nigeria?+
Nigeria is governed by the Nigeria Data Protection Regulation (NDPR). The law is enforced by the Nigeria Data Protection Bureau (NDPB). According to our analysis, the country has a Moderate level of data protection framework.
Does Nigeria require a Data Protection Officer (DPO)?+
Yes, under the Nigeria Data Protection Regulation (NDPR), organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in Nigeria?+
Partially. While Nigeria Data Protection Regulation (NDPR) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Nigeria?+
Under the Nigeria Data Protection Regulation (NDPR), organizations must notify the Nigeria Data Protection Bureau (NDPB) and affected individuals without undue delay in the event of a personal data breach.