Nigeria Data Protection Act 2023
An Act to Provide a Legal Framework for the Protection of Personal Information, and Establish the Nigeria Data Protection Commission for the Regulation of the Processing of Personal Information; and for Related Matters
[12th Day of June, 2023] – Commencement.
Part I—objectives and Application
Section 1 Nigeria Data Protection Act 2023: Objectives
Section 2 Nigeria Data Protection Act 2023: Application
Section 3 Nigeria Data Protection Act 2023: Exemption of application
Part II — Establishment of the Nigeria Data Protection Commission, and Its Governing Council
Section 4 Nigeria Data Protection Act 2023: Establishment of the Nigeria Data Protection Commission
Section 5 Nigeria Data Protection Act 2023: Functions of the Commission
Section 6 Nigeria Data Protection Act 2023: Powers of the Commission
Section 7 Nigeria Data Protection Act 2023: Independence of the Commission
Section 8 Nigeria Data Protection Act 2023: Establishment of the Governing Council of the Commission
Section 9 Nigeria Data Protection Act 2023: Appointment of members of the Council
Section 10 Nigeria Data Protection Act 2023: Tenure of members of the Council
Section 11 Nigeria Data Protection Act 2023: Cessation of membership
Section 12 Nigeria Data Protection Act 2023: Functions and powers of the Council
Section 13 Nigeria Data Protection Act 2023: Conflict of interest
Part III — Appointment of the National Commissioner, and Other Staff of the Commission
Section 14 Nigeria Data Protection Act 2023: Appointment of the National Commissioner for the Commission
Section 15 Nigeria Data Protection Act 2023: Secretary to the Council
Section 16 Nigeria Data Protection Act 2023: Staff of the Commission
Section 17 Nigeria Data Protection Act 2023: Staff regulations and discipline
Section 18 Nigeria Data Protection Act 2023: Pension
Part IV — Financial Provisions
Section 19 Nigeria Data Protection Act 2023: Funds of the Commission
Section 20 Nigeria Data Protection Act 2023: Expenditure of the Fund
Section 21 Nigeria Data Protection Act 2023: Power to borrow and accept gifts
Section 22 Nigeria Data Protection Act 2023: Account and audit
Section 23 Nigeria Data Protection Act 2023: Annual reports and estimates
Part V — Principles and Lawful Basis Governing Processing of Personal Data
Section 24 Nigeria Data Protection Act 2023: Principles of personal data processing
Section 25 Nigeria Data Protection Act 2023: Lawful basis of personal data processing
Section 26 Nigeria Data Protection Act 2023: Consent
Section 27 Nigeria Data Protection Act 2023: Provision of information to the data subject
Section 28 Nigeria Data Protection Act 2023: Data privacy impact assessment
Section 29 Nigeria Data Protection Act 2023: Obligations of the data controller and data processor
Section 30 Nigeria Data Protection Act 2023: Sensitive personal data
Section 31 Nigeria Data Protection Act 2023: Children or persons lacking the legal capacity to consent
Section 32 Nigeria Data Protection Act 2023: Data Protection Officers
Section 33 Nigeria Data Protection Act 2023: Data protection compliance services
Part VI — Rights of a Data Subject
Section 34 Nigeria Data Protection Act 2023: Rights of a data subject
Section 35 Nigeria Data Protection Act 2023: Withdrawal of consent
Section 36 Nigeria Data Protection Act 2023: Right to object
Section 37 Nigeria Data Protection Act 2023: Automated decision making
Section 38 Nigeria Data Protection Act 2023: Data portability
Part VII — Data Security
Section 39 Nigeria Data Protection Act 2023: Security, integrity, and confidentiality
Section 40 Nigeria Data Protection Act 2023: Personal data breaches
Part VIII — Cross-border Transfers of Personal Data
Section 41 Nigeria Data Protection Act 2023: Basis for cross-border transfer of personal data
Section 42 Nigeria Data Protection Act 2023: Adequacy of protection
Section 43 Nigeria Data Protection Act 2023: Other bases for transfer of personal data outside Nigeria
Part IX — Registration and Fees
Section 44 Nigeria Data Protection Act 2023: Registration of data controllers and data processors of major importance
Section 45 Nigeria Data Protection Act 2023: Fees and levies
Part X — Enforcement
Section 46 Nigeria Data Protection Act 2023: Complaints and investigations
Section 47 Nigeria Data Protection Act 2023: Compliance orders
Section 48 Nigeria Data Protection Act 2023: Enforcement orders
Section 49 Nigeria Data Protection Act 2023: Offences and penalties
Section 50 Nigeria Data Protection Act 2023: Judicial review
Section 51 Nigeria Data Protection Act 2023: Civil remedies
Section 52 Nigeria Data Protection Act 2023: Forfeiture
Section 53 Nigeria Data Protection Act 2023: Joint and vicarious liability
Part XI — Legal Proceedings
Section 54 Nigeria Data Protection Act 2023: Limitation of suits against the Commission
Section 55 Nigeria Data Protection Act 2023: Service of documents
Section 56 Nigeria Data Protection Act 2023: Restriction on execution against property of the Commission
Section 57 Nigeria Data Protection Act 2023: Indemnity of staff, members, and employees of the Commission
Section 58 Nigeria Data Protection Act 2023: Power of arrest, search, and seizure
Section 59 Nigeria Data Protection Act 2023: Right to appear in court
Part XII — Miscellaneous Provisions
Section 60 Nigeria Data Protection Act 2023: Directives by the Minister
Section 61 Nigeria Data Protection Act 2023: Regulations
Section 62 Nigeria Data Protection Act 2023: Directives, codes, and guidelines
Section 63 Nigeria Data Protection Act 2023: Priority of the Act
Section 64 Nigeria Data Protection Act 2023: Transitional provisions
Section 65 Nigeria Data Protection Act 2023: Interpretation
Section 66 Nigeria Data Protection Act 2023: Citation
Schedule: Not Available
