Nigeria: Privacy Protection

Artificial intelligence systems are already processing personal data and making consequential decisions across Nigerian industries, from finance to healthcare. While many assume AI remains unregulated in Nigeria until dedicated legislation arrives, organisations deploying credit-scoring algorithms, automated recruitment tools, and clinical decision-support models may already be subject to binding legal obligations under the country's existing data protection framework.

The Nigeria Data Protection Commission has issued new guidance clarifying training obligations for organisations under the Nigeria Data Protection Act.

In today’s digital environment, data breaches are an operational reality. It could be the result of a sophisticated cyber-attack or an email sent to the wrong person. It is important to note, however, that our data privacy law does not penalise organisations simply for being victims of a personal data breach.

The Central Bank of Nigeria's new rule limiting BVN-linked phone number changes to just once raises critical questions about balancing financial security with data subject rights. As phone numbers serve as essential authentication tools yet remain inherently changeable due to theft, loss, or compromise, this regulatory restriction may conflict with statutory rectification rights under data protection law.

Data controllers and Data Processors Major Importance must prepare, maintain, and make available certain documents for audit review before filing its NDPA compliance...

In a landmark judgment on 17th March 2026, the Federal High Court, Warri in the case of Maxwell Nosakhare Uwaifo v. I.G.P & Ors. (Suit No: FHC/WR/CS/87/2025), presided over by Justice H.A.Nganjiwa, upheld the constitutional rights of Nigerian citizens to record police officers performing their duties in public.

Photography has long been celebrated as a powerful medium for preserving memories. Beyond capturing fleeting moments, photographs serve as historical records, shape public opinion, and communicate stories...

We live in a society where Closed-Circuit Televisions ("CCTVs") are now a common sight in residential homes, commercial and retail locations, office and industrial sites, places of worship, parks, schools, and public spaces.

The Nigerian Data Protection Act 2023 (NDPA) was enacted to establish a comprehensive statutory framework for data protection in Nigeria.