Nigeria: Adopted Data Protection Bill including registration obligation for data controllers and processors of major importance

On 24 May 2023, the House of Representatives adopted the Data Protection Bill, including business registration requirements. The Bill requires data controllers and processors of major importance to register with the Commission within six months of the Bill's commencement or upon becoming significant data handlers. They must also describe risks, safeguards, and security measures adopted to protect the data stored. The Commission has the power to prescribe the definition of a data controller or processor of major importance.