Nigeria: Adopted Code of Conduct for Data Protection Compliance Organizations by the Nigerian Data Protection Commission

On 15 December 2023, the Nigerian Data Protection Commission (NDPC) adopted the “Code of Conduct for Data Protection Compliance Organizations (DPCOs) 2023”. The Code aims to regulate competent firms licensed as Data Compliance Organisations (DPCs) in accordance with the Nigeria Data Protection Act 2023. The Code sets out objectives such as promoting professionalism, ensuring uniformity in compliance processes, and ensuring trust in Nigeria's digital data governance processes. The Code also outlines the responsibilities of DPCOs to data subjects, the Commission, clients, and other DPCOs. It further details the registration process for DPCOs and the potential revocation of licenses for non-compliance with the Code.