The Nigerian Data Protection Law

The Nigerian Data Protection Law

September 17, 2019

The oxford dictionary defines data protection as legal control over access to and use of data stored in computers.

Giving our computerized generation today, data security is fundamental.

Data protection is the process of protecting sensitive data such as prevention from identity theft, safeguard of privacy, safe from loss and every unauthorised access.

In a bid to protect data in Nigeria, as a result of the increasing rate of data usage in the country, the government passed the new law “Nigeria Data Protection Regulation (NITDA)2019”. This contains principles that all Government and its agencies, organisations, company and businesses must uphold in order to protect a person’s personal data. This is inclusive of anybody in Nigeria or abroad who is a citizen of Nigeria.

Personal Data in Nigeria may be collected for the following reasons;

  1. Scientific, historical research or statistical purposes.
  2. To archive(store)
  3. Public interest.
  4. Reasons that don’t affect the dignity of a human person

The Law charges the data collector with the responsibility of protecting the data collected by protecting it for harm such as data theft and such person would be responsible for any wrongful action done with another’s data while in their possession. A data collector is also prohibited from transferring such data to a third party.

In spite of the above, data can be legally collected and processed in any of the following ways;

  1. Where the third party has given consent to use the personal data.
  2. For the performance of a contract where the third party is a party.
  3. In compliance with legal obligations
  4. To protect the vital interest of the third party.
  5. For public interest.

The Data subject must be aware of the specific reason for which the data is being collected and it must not be collected through fraud, coercion and undue influence.

The law strictly requires the data controller to add a privacy policy when it is processing Data. It also states that anyone processing data must take security measures to protect the data.

What is the effect of the Data protection law?

The law strictly prohibits any one whether a corporate organisation or non-governmental organisation from transferring a person’s data,  whether it’s their staff on or not to a third party except the data is processed or used in line with any of the above or unless it involves any of the exceptions. Selling of another person’s personal data or transferring of another person’s data without permission is illegal.

The law also strongly condemns the use of personal Data for illicit activities or for something that is against the dignity of human persons.

It provides that data should be used cautiously and personal data privacy secured against attacks such as data theft.

Consequences

The consequences of the breach of data privacy rights by this regulation is;

(a) Where the data company or person is dealing with over 10, 000 data, they shall pay a fine of 2% of Annual Gross Revenue of the next year or the sum of N10, 000, 000 (Ten Million Naira) whichever is greater.

(b) Where the data company or person is dealing with less than10, 000 data, they shall pay a fine of 1% of Annual Gross Revenue of the next year or the sum of N2, 000, 000 (Two Million Naira) whichever is greater.

This is exclusive of any criminal action that might be brought against them.

 

 

 

The information in this blog post (“post”) is provided for general informational purposes only, no information contained in this post should be construed as legal advice, nor is it intended to be a substitute for legal counsel on any subject matter. No reader of this post should act or refrain from acting on the basis of any information included in, or accessible through this post without seeking the appropriate legal or professional advice from the particular facts and circumstances at issue from a lawyer. This post is protected by intellectual property law and regulations. It may however be shared using appropriate sharing tools provided that our authorship is always acknowledged and this Disclaimer Notice attached

More Articles

Search

Connect With Us

Got any questions?

If you are having any questions, please feel free to ask.

Send us an email

Frequently Asked

  • When are Annual Returns due for filing?

    A company’s first Annual Returns are due for filing after 18 months of its inception, subsequently it should be filed annually as the name implies. The filing dates could differ for each company depending on their financial year end but must be filed not later than 42 days after its Annual General Meeting.

    The Annual Returns for Business Names is due not later than the 30th of June each year except in the year the business was registered.

  • What’s the difference between a business name and an LLC?
    • A business name is a sole proprietorship, usually owned and managed by one individual only. Legally, the sole proprietor and his business are one. It simply means an individual trading with an alias. The sole proprietor is personally liable for all business related obligations.

    • A limited liability company on the other hand is a separate business entity from the individuals that hold its shares and act as directors. Legally, it’s a separate business entity and a person on its own who can transact business, own property separate from its owners and can sue or be sued. 

  • What is an execution clause in a contract?

    This is the section in which the parties sign the contract or agreement.

  • What are the product categories available when registering with NAFDAC?

    The product categories include: Food, Cosmetics, Drug, Medical Device, Agro-Chemicals & Pesticide, Veterinary Products, Vaccines & Biologicals, Herbal and Nutraceuticals and Water

  • Can I use the data collected legally for one purpose for another purpose?

    No, you can’t use the data collected for one purpose for a different purpose.

  • Does copyright protect website Domain names?

    No, copyright does not protect domain names.

  • What will happen if I buy the wrong category of forms with NAFDAC?

    Nothing, the purchased form will be in your account for future use.

     

  • How many shareholders do I need to start a company?

    A minimum of one (1) adult shareholder is required to form a company.

  • How long does a trademark registration in Nigeria Last?

    Trademark is valid for seven years from the date of application but you may renew the application for the trademark for an additional period of 14years.

Call Us Now on +234 901 719 0079 Chat on WhatsApp