Nigeria: Data Protection Commission adopted guidance notice on registration of data controllers and data processors of major importance

On 14 February 2024, the Nigeria Data Protection Commission adopted Guidance Notice: Registration of Data Controllers and Data Processors of Major Importance NDPC/HQ/GN/VOL.02/24 (Pursuant to Sections 5d, 6(c), 44, 45, and 65 of the Nigeria Data Protection Act). This notice mandates the registration of data controllers and processors that handle personal data of over 200 data subjects within six months or operate in critical sectors such as finance, health, and telecommunications. Entities are classified into three categories: Major Data Processing-Ultra High Level (MDP-UHL), Major Data Processing-Extra High Level (MDP-EHL), and Major Data Processing-Ordinary High Level (MDP-OHL), each with specific registration fees ranging from NGN 10'000 to NGN 250'000.