Privacy Law and Privacy Regulations

In today’s digital environment, data breaches are an operational reality. It could be the result of a sophisticated cyber-attack or an email sent to the wrong person. It is important to note, however, that our data privacy law does not penalise organisations simply for being victims of a personal data breach.

The age of automated decision-making ("ADM") has arrived in Nigeria. Banks and fintech platforms deploy credit-scoring models to determine lending outcomes, and public institutions increasingly rely on data-driven systems in the exercise of statutory functions.

"Pseudonymisation" is one of those words that sounds more complex than it is, but its implications for data protection compliance in Nigeria are anything but simple.