The National Information Technology and Development Agency (‘NITDA’) has published a notice stating that the full implementation of the Data Protection Regulation (‘Regulation’) commenced on 25th April 2019.

On January 25 2019, NITDA issued the Regulation which regulates the exchange of personal data and safeguards the data privacy rights of Nigerians and non-Nigerian residents.

The Regulation prescribes that all Nigerian organisations must within three (3) months of the issuance of the Regulation (i.e. 25th April 2019) make available to the public, their data protection policies. Where an organisation is in default of the Regulation, it will be liable to a fine of 2 Million Naira or 10 Million Naira; or 1% or 2% of its Annual Gross Revenue.