Nigeria: Data Protection Commission's guidance notice on registration of data controllers and data processors of major importance entered into force

On 30 September 2024, the Nigeria Data Protection Commission Guidance Notice on Registration of Data Controllers and Data Processors of Major Importance NDPC/HQ/GN/VOL.02/24 (Pursuant to Sections 5d, 6(c), 44, 45, and 65 of the Nigeria Data Protection Act) entered into force. The implementation was postponed from 30 June 2024 to 30 September 2024. This notice mandates the registration of data controllers and processors that handle personal data of over 200 data subjects within six months or operate in critical sectors such as finance, health, and telecommunications. Entities are classified into three categories: Major Data Processing-Ultra High Level (MDP-UHL), Major Data Processing-Extra High Level (MDP-EHL), and Major Data Processing-Ordinary High Level (MDP-OHL), each with specific registration fees ranging from NGN 10'000 to NGN 250'000.