Nigeria: Implemented Data Protection Act, 2023 (Act No. 37) including cybersecurity regulation

On 12 June 2023, the Data Protection Act, 2023 (Act No. 37), which outlines cybersecurity obligations, entered into force. The Act requires data controllers and processors to implement cybersecurity measures proportionate to the amount and type of personal data being processed and the manner of processing. The Act requires data controllers and processors to notify the Nigeria Data Protection Commission and affected data subjects of relevant breaches.