Africa: Privacy

Nigeria's digital regulatory landscape has fundamentally shifted as enforcement actions against major corporations demonstrate that data protection, cybersecurity, and social media compliance are no longer optional.

In today’s digital environment, data breaches are an operational reality. It could be the result of a sophisticated cyber-attack or an email sent to the wrong person. It is important to note, however, that our data privacy law does not penalise organisations simply for being victims of a personal data breach.

The age of automated decision-making ("ADM") has arrived in Nigeria. Banks and fintech platforms deploy credit-scoring models to determine lending outcomes, and public institutions increasingly rely on data-driven systems in the exercise of statutory functions.