Ask Reggi Your Question Now
Can you summarize Nigerian Data Protection Regulation 2019 (in English)?
Nigeria Regulations - Others > Nigerian Data Protection Regulation 2019 (in English)
Short Summary
The Nigeria Data Protection Regulation 2019 governs the processing and protection of personal data in Nigeria. It aims to safeguard the rights of natural persons to data privacy, foster safe conduct for transactions involving the exchange of personal data, prevent manipulation of personal data, and ensure that Nigerian businesses remain competitive in international trade through a just and equitable legal regulatory framework. The regulation applies to all transactions intended for the processing of personal data, including natural persons residing in Nigeria or residing outside Nigeria who are citizens of Nigeria. However, it does not deny any Nigerian or natural person the privacy rights they are entitled to under any law, regulation, policy, contract, or foreign jurisdiction. Non-compliance with the regulation can result in penalties, with fines ranging from 1% to 2% of the Annual Gross Revenue of the preceding year or 2 million to 10 million Naira, depending on the number of data subjects involved.
Whom does it apply to?
This regulation applies to all transactions intended for the processing of personal data, to natural persons residing in Nigeria or residing outside Nigeria who are citizens of Nigeria.
What does it govern?
Nigeria Data Protection Regulation 2019 governs the processing and protection of personal data in Nigeria.
What are exemptions?
This regulation shall not operate to deny any Nigerian or any natural person the privacy rights he is entitled to under any law, regulation, policy, contract for the time being in force in Nigeria or in any foreign jurisdiction.
What are the Penalties?
In case of a data controller dealing with more than 10,000 data subjects, a fine of 2% of Annual Gross Revenue of the preceding year or 10 million Naira, whichever is greater. In case of a data controller dealing with less than 10,000 data subjects, a fine of 1% of the Annual Gross Revenue of the preceding year or 2 million Naira, whichever is greater.
Jurisdiction
Nigeria