All instruments Regulation Nigeria: Nigeria Data Protection Act 2023 No summary is recorded for this instrument. Adopted Not yet reviewed English Open the source (opens in a new tab) Suggest a correction Details Full text Details Identity Title Nigeria Data Protection Act 2023 Original title Not recorded Instrument ID ng-data-protection-act-2023 Type Regulation Status Adopted Jurisdiction and publisher Jurisdiction Nigeria Publisher Not recorded Language English Dates and versions Date June 12, 2023 Versions Enacted · June 12, 2023 Classification Policy areas Not recorded Source Source URL https://ndpc.gov.ng/wp-content/uploads/2024/03/Nigeria_Data_Protection_Act_2023.pdf Retrieved August 29, 2026 License Unknown. Follow the publisher’s terms. Access note Not recorded Full text 88,025 characters Original text, English · 88,025 characters in 1 part Load the full text Download as .txt Outline (117 headings) 37 Nigeria Data Protection Act, 2023 .. .. .. .. .. .. A719-758 PART I—OBJECTIVES AND APPLICA TION 1. Objectives 2. Application 3. Exemption of application PART II — ESTABLISHMENT OF THE NIGERIA DA TA PROTECTION COMMISSION, 4. Establishment of the Nigeria Data Protection Commission 5. Functions of the Commission 6. Powers of the Commission 7. Independence of the Commission 8. Establishment of the Governing Council of the Commission 9. Appointment of members of the Council 10. Tenure of members of the Council 11. Cessation of membership 12. Functions and powers of the Council 13. Conflict of interest PART III — APPOINTMENT OF THE NA TIONAL COMMISSIONER, AND OTHER 14. Appointment of the National Commissioner for the Commission 15. Secretary to the Council 16. Staff of the Commission 17. Staff regulations and discipline 18. Pension PART IV — FINANCIAL PROVISIONS 19. Funds of the Commission 20. Expenditure of the Fund 21. Power to borrow and accept gifts 22. Account and audit 23. Annual reports and estimates PART V — PRINCIPLES AND LAWFUL BASIS GOVERNING PROCESSING 24. Principles of personal data processing 25. Lawful basis of personal data processing 26. Consent 27. Provision of information to the data subject 28. Data privacy impact assessment 29. Obligations of the data controller and data processor 30. Sensitive personal data 31. Children or persons lacking the legal capacity to consent 32. Data Protection Officers 33. Data protection compliance services PART VI — RIGHTS OF A DATA SUBJECT 34. Rights of a data subject 35. Withdrawal of consent 36. Right to object 37. Automated decision making 38. Data portability PART VII — DA TA SECURITY 39. Security, integrity, and confidentiality 40. Personal data breaches PART VIII — CROSS-BORDER TRANSFERS OF PERSONAL DATA 41. Basis for cross-border transfer of personal data 42. Adequacy of protection 43. Other bases for transfer of personal data outside Nigeria PART IX — REGISTRA TION AND FEES 44. Registration of data controllers and data processors of major importance 45. Fees and levies PART X — ENFORCEMENT 46. Complaints and investigations 47. Compliance orders 48. Enforcement orders 49. Offences and penalties 50. Judicial review 51. Civil remedies 52. Forfeiture 53. Joint and vicarious liability PART XI — LEGAL PROCEEDINGS 54. Limitation of suits against the Commission 55. Service of documents 56. Restriction on execution against property of the Commission 57. Indemnity of staff, members, and employees of the Commission 58. Power of arrest, search, and seizure 59. Right to appear in court PART XII — MISCELLANEOUS PROVISIONS 60. Directives by the Minister 61. Regulations 62. Directives, codes, and guidelines 63. Priority of the Act 64. Transitional provisions 65. Interpretation 66. Citation SCHEDULE: A 722 2023 No. 37 Nigeria Data Protection Act, 2023 PART II — ESTABLISHMENT OF THE NIGERIA DATA PROTECTION 5. The Commission shall — 6. The Commission shall have powers to — 7. The Commission shall be independent in the performance of its 16. The Commission shall, subject to the approval of the Council, recruit PART V — PRINCIPLES AND LAWFUL BASIS GOVERNING 33. The Commission may license a person having a requisite level of 45. The Commission may prescribe fees or levies to be paid by data 50. A person who is not satisfied with an order of the Commission, may 51. A data subject, who suffers injury, loss, or harm as a result of a 52. Notwithstanding anything to the contrary, the Court may make an 55. A notice, summons, process, or document, required or authorised to 57. The National Commissioner, a member of Council, staff of the 59. A legal officer of the Commission or a private legal practitioner 60. Subject to the provisions of this Act, the Minister may give to the 62. The Commission may, where necessary, issue directives, codes, or 63. Where the provisions of any other law or enactment, in so far as 65. In this Act — 66. This Act may be cited as the Nigeria Data Protection Act, 2023.Citation SCHEDULE Section 8(3) 1. Subject to the provisions of this Act, the Council may make standing 3. The quorum at a meeting of the Council shall be the Chairman, or in 4. The quorum of any committee of Council shall be determined by the 5. At a meeting of the Council, each member present shall be entitled to 6. Where the Council seeks the advice of any person on a particular 7. In addition to meeting with all participants physically present, the Council 8. A member of the Council, who participates in a teleconference 9. The Council may establish procedure for teleconference meetings 10. Subject to standing orders made by the Council under this Act, the 11. Every committee appointed under the provisions of paragraph 10 12. The decision of a committee shall have no effect until it is approved 13. The affixing of the seal of the Commission shall be done and 14. A contract or instrument which, if made by a person not being a 15. A document purporting to be a contract, an instrument, or other 16. The validity of a proceeding of the Council or its committee is not 17. A member of the Council or any of its committees, who has a 18. If a member of the Council discloses an interest under paragraph The outline comes from headings detected in the text, so it might miss some or include extras. JavaScript is turned off. To read the text, open each of its 1 part: Part 1 733 of 1,262, newest first Previous Civil Nuclear Export Act of 2023 Next AN ACT CONCERNING ARTIFICIAL INTELLIGENCE, AUTOMATED DECISION-MAKING AND PERSONAL DATA PRIVACY. Show a random instrument All instruments