A CRITICAL ANALYSIS OF THE NIGERIA DATA PROTECTION ACT 2023: ELEVATING STANDARDS TO GLOBAL NORMS
Keywords:
Data Protection, Nigeria Data Protection Act, GDPR, Privacy Rights, Regulatory FrameworkAbstract
The Nigeria Data Protection Act (NDPA) 2023 marks a pivotal advancement in Nigeria's regulatory framework for data protection. This article critically examines the NDPA, highlighting its alignment with the European Union's General Data Protection Regulation (GDPR) and its implications for Nigeria. Employing a doctrinal research methodology, the analysis delves into the Act's provisions, including definitions, data subject rights, data controller obligations, and the establishment of the Nigeria Data Protection Commission (NDPC). Comparisons with the GDPR underscore both the strengths and potential challenges of the NDPA, particularly in areas such as extraterritoriality, independence of the regulatory authority, and enforcement mechanisms. The article also explores the socio-economic and legal contexts that influence the Act's implementation. Recommendations are provided to enhance the effectiveness of the NDPA in safeguarding privacy rights and fostering trust in Nigeria's digital economy
Downloads
References
Aloamaka PC, ‘Data Protection and Privacy Challenges in Nigeria: Lessons from Other Jurisdictions’ (2023) 3 UCC Law Journal 281
Alunge R, ‘Consolidating the Right to Data Protection in the Information Age: A Comparative Appraisal of the Adoption of the OECD (Revised) Guidelines into the EU GDPR, the Ghanaian Data Protection Act 2012 and the Kenyan Data Protection Act 2019’ in Jessica Thorn, Assane Gueye and Adam P Hejnowicz (eds), Innovations and Interdisciplinary Solutions for Underserved Areas (Springer International Publishing 2020)
Babalola O, ‘Nigeria’s Data Protection Legal and Institutional Model: An Overview’ (2022) 12 International Data Privacy Law 44
Babalola O, ‘The GDPR-Styled Nigeria Data Protection Act 2023 and the Reverberations of a Legal Transplant’ (2024) 3 British Journal of Cyber Criminology 1
Elebeke E, ‘How NITDA Impacted IT Industry in 2024 - Report’ Vanguard News (19 December 2024) <https://www.vanguardngr.com/2024/12/how-nitda-impacted-it-industry-in-2024-report/> accessed 26 January 2025
Gstrein OJ and Zwitter AJ, ‘Extraterritorial Application of the GDPR: Promoting European Values or Power?’ (2021) 10 Internet Policy Review 1
Gustavsson S, ‘An Assessment of Privacy by Design as a Stipulation in GDPR’ (Masters Thesis2020) 12
ITEdgeNews, ‘NDPC Holds National Privacy Week, Reports N12bn Revenue’ (ITEdgeNews29 January 2025) <https://www.itedgenews.africa/ndpc-holds-national-privacy-week-reports-n12bn-revenue/> accessed 29 January 2025
King’ori M, ‘Nigeria’s New Data Protection Act, Explained’ (https://fpf.org/28 June 2023) <https://fpf.org/blog/nigerias-new-data-protection-act-explained/> accessed 27 January 2025
Mousourakis G, ‘Legal Transplants and Legal Development: A Jurisprudential and Comparative Law Approach’ (2013) 54 Acta Juridica Hungarica 219
Oraegbunam IKE and Edema T, ‘EXAMINING the JUDICIAL ATTITUDE to DATA PROTECTION in NIGERIA’ (2023) 4 LAW AND SOCIAL JUSTICE REVIEW 3
Tunji S, ‘Govt Earned N12bn from Data Protection in 2024 – NDPC’ Punch Newspaper (2024) <https://punchng.com/govt-earned-n12bn-from-data-protection-in-2024-ndpc/> accessed 26 January 2025
STATUTES
Child’s Right Act 2003, s 277
Constitution of the Federal Republic of Nigeria 1999, s 37
General Data Protection Regulation (EU) 2016/679, arts 2(2)(c), 3, 7, 8(1), 9, 9(3), 10, 15, 16, 17, 17(2), 18, 19, 20, 21, 22, 25, 32, 32(4), 35, 35(7), 36, 37, 37(1), 37(2), 37-39, 39(1), 42, 42(8), 42(5), 43, 44-50.
India, Digital Personal Data Protection Act 2023, s 8(5), s 8(6).
Nigeria Data Protection Act 2023, ss 1, 2, 3(1), 14, 26, 26(3), 28, 30, 31(5), 32, 33, 34, 34-38, 37, 39, 41-43, 42.
Republic of Kenya, Data Protection Act No. 24 of 2019, s 5.
Republic of South Africa, Protection of Personal Information Act 4 of 2013, s 39.
CASE LAWS
Digital Rights Lawyers Initiative (DRLI) v National Identity Management Commission (NIMC), Appeal Number CA/IB/291/2020
Incorporated Trustees of Digital Rights Lawyers Initiative (DRLI) v Central Bank of Nigeria (CBN), Unreported Suit No. FHC/AB/CS/76/2020
Incorporated Trustees of Digital Rights Lawyers Initiative v L.T. Solutions & Multimedia Limited, Suit No. HCT/262/2020
Incorporated Trustees of Digital Rights Lawyers Initiative v Minister of Industry, Trade, and Investment & 2 Ors, Unreported Case Suit No. FHC/AWK/CS/116/2020
