The Nigeria Data Protection Commission (NDPC) is tasked with ensuring data protection compliance and registration for all organizations that collect and process data in Nigeria.
This requirement is in accordance with the provisions of the Data Protection Act, which mandates data controllers and data processors to register with the Commission within six months of the enactment of the law.
The Act covers organizations such as banks, telecom operators, educational institutions, government parastatals, insurance companies, and others that handle people’s personal data.
The registration process is set to take place between the date of the law’s enactment and December 31, 2023. Registered organizations are also required to submit their annual audit reports to the Commission between January and March each year.
The primary goal of the NDPC is to protect the rights of individuals to control and safeguard their personal information in an interconnected world. It is responsible for creating awareness, conducting investigations, and imposing penalties on data protection violators.
The implementation of the Data Protection Act is also expected to increase foreign direct investment in Nigeria, as investors will have confidence in the country’s legal framework for data protection.
Data subjects, which include all Nigerians who have their data with government or private organizations, have certain rights under the Data Protection Act. These rights include giving or withholding consent for data collection, the right to rectify incorrect data, data portability, erasure, and the right to refuse data processing, among others.
Data controllers and data processors are obligated to take measures to ensure the security of the data they hold. This involves implementing technological and organizational measures to protect the data from unauthorized access or breaches.
The signing of the Data Protection Bill into law on June 12 has transformed the National Data Protection Bureau into a Commission, which will be responsible for driving the implementation of the data protection law in Nigeria. The Commission’s work is essential for safeguarding individuals’ data and promoting trust in the economy, thereby attracting foreign direct investments to the country.
