Nigeria: Implemented Data Protection Act, 2023 (Act No. 37) including personal data protection regulation

On 12 June 2023, the Data Protection Act, 2023 (Act No. 37), which outlines data protection regulations, entered into force. The Act outlines data subjects' rights, including the rights to access, correction, deletion, objection, withdraw consent, data portability, and not to be subject to a decision based solely on automated processing of personal data. Furthermore, the Act outlines obligations for data controllers, such as processing personal data in a fair, lawful and transparent manner, conducting data protection impact assessments, processing sensitive personal data, and data minimisation principles. The Act requires data controllers to obtain parental consent before processing the personal data of minors.