Nigeria: Adopted Data Protection Bill including personal data protection regulation

On 24 May 2023, the House of Representatives adopted the Data Protection Bill, including data protection regulation. The Bill outlines data subjects' rights, including the rights to access, correction, deletion, objection, withdraw consent, data portability, and not to be subject to a decision based solely on automated processing of personal data. Furthermore, the Bill outlines obligations for data controllers, such as processing personal data in a fair, lawful and transparent manner, conducting data protection impact assessments, processing sensitive personal data, and data minimisation principles. The Bill requires data controllers to obtain parental consent before processing the personal data of minors.