DATA PROTECTION BILL, 2020
Bill · Technology
Policy date: 2023-01-01
A Bill provides a framework for protecting personal data, establishing rights for individuals and obligations for data handlers. It targets organizations like digital platforms and government agencies that process citizen data. It aims to align with international standards for data security.
DATA PROTECTION BILL, 2020
What Is This Policy?
A draft bill that sought to provide a comprehensive legislative framework for the protection of personal data in Nigeria, establishing rights for data subjects and obligations for data controllers and processors.
Who Does It Target?
Organisations collecting and processing personal data Digital platforms, fintech, and telecommunications companies Government agencies managing citizen data Nigerian citizens as data subjects
What Does It Aim to Achieve?
Establish clear legal rights for individuals over their personal data and binding obligations for organisations that collect and process it, aligned with international data protection standards.
Key Features
Data Subject Rights: Proposed rights to access, correction, deletion, and portability of personal data. Lawful Processing: Required a lawful basis such as consent or legitimate interest for processing personal data. Data Protection Commissioner: Proposed establishment of a Data Protection Commissioner as the regulatory authority. Cross-Border Transfer: Proposed conditions for lawful transfer of Nigerians personal data to other countries.
Current Status
Rollout Stage: Superseded - Nigeria Data Protection Act 2023 enacted and NDPC established Coverage: Not applicable - superseded by NDPA 2023 Beneficiaries: Data subjects whose rights are protected; compliant organisations Funding: Not applicable
How to Access
Refer to the Nigeria Data Protection Act 2023 for current obligations Register with the Nigeria Data Protection Commission (NDPC) as a data controller Application method: Engage the Nigeria Data Protection Commission (NDPC) for current compliance requirements.
Important Terms
The 2020 Bill has been superseded; compliance is now governed by the Nigeria Data Protection Act 2023 The Nigeria Data Protection Regulation 2019 (NDPR) remains relevant for historical compliance assessments NDPC is now the regulatory authority for data protection
Official Resources
Website: https://www.ndpb.gov.ng Contact: Nigeria Data Protection Commission (NDPC)
Legal Framework
The Data Protection Bill 2020 was a precursor to the Nigeria Data Protection Act (NDPA) 2023, which is now the primary legislation. The 2020 Bill aligned with the EU General Data Protection Regulation (GDPR), the ECOWAS Supplementary Act on Personal Data Protection, and the African Union Convention on Cyber Security and Personal Data Protection. The enacted NDPA 2023 now derives authority from Section 37 of the 1999 Constitution and operates alongside the Data Protection Commission Act.