Nigeria: National Information Technology Development Agency adopted Nigeria Data Protection Regulation 2019 including data localisation requirement

On 25 January 2019, the National Information Technology Development Agency (NITDA) issued the Nigeria Data Protection Regulation (NDPR). The NDPR includes data localisation requirements, mandating that data concerning a country’s citizens or residents be collected, processed, and stored within the country. This is particularly relevant for the transfer of personal data to a foreign country or an international organisation, which must take place subject to the supervision of the Honourable Attorney General of the Federation (HAGF).