Arrêt rendu en application des articles 25 et 26 du Traité de l'OHADA et du Règlement de Procédure de la Cour Commune de Justice et d'Arbitrage


# Federal Republic of Nigeria Official Gazette

No. 119

Lagos - 1st July, 2023

Vol. 110

Government Notice No. 82

The following is published as supplement to this Gazette :

Act No.

Short Title

Page

37 Nigeria Data Protection Act, 2023 .. A719-758

# NIGERIA DATA PROTECTION ACT, 2023


# ArraNgement of SEctions

# Section :

# Part I—ObJEctives and Application

1. Objectives
2. Application
3. Exemption ofapplication

Part II — Establishment of the Nigeria Data Protection Commission, and its Governing Council

1. Establishment of the Nigeria Data Protection Commission

5.Functions of the Commission 6.Powers of the Commission 7. Independence of the Commission 8.Establishment of the Governing Council of the Commission 9. Appointment of members of the Council [0.Tenure of members of the Council 11. Cessation of membership 2.Functions and powers of the Council [3. Conflict of interest

# Part III — Appointment of the National Commissioner, and Other StafF of the Commission

1. Appointment of the National Commissioner for the Commission
2. Secretary to the Council
3. Staff of the Commission
4. Staff regulations and discipline
5. Pension

# Part IV — Financial Provisions

1. Funds of the Commission
2. Expenditure of the Fund
3. Power to borrow and accept gifts

22.Account and audit 23. Annual reports and estimates

# Part V — Priciples and Lawful Basis Governing Processing of Personal Data

Principles of personal data processing Lawful basis of personal data processing 26. Consent Provision of information to the data subject 28.Data privacy impact assessment 2Obligations of the data controller and data processor 30. Sensitive personal data hidrensnskintpacityonsn 32. Data Protection Officers Data protection compliance services

# Part VI— Rights of a Data Subject

1. Rights of a data subject
2. Withdrawal of consent
3. Right to object

Automated decision making 38. Data portability

# Part VII — Data Security

Security, integrity, and confidentiality 40. Personal data breaches

# Part VIII — Cross-border Transfers of Personal Data

1. Basis for cross-border transfer of personal data
2. Adequacy of protection

43.Other bases for transfer of personal data outside Nigeria

# Part IX — Registration and Fees

Registration ofdata controllers and data processorsofajor importance 45. Fees and levies

# Part X — Enforcement

46.Complaints and investigations 47. Compliance orders 48. Enforcement orders 49. Offences and penalties 50. Judicial review 51. Civil remedies 52. Forfeiture Join and vicarious liability

# Part XI— Legal ProceedIngs

1. Limitation of suits against the Commission

55.Service of documents 56Restriction on execution against property of the Commission 57. Indemnity of staff, members, and employees of the Commission 58. Power of arrest, search, and seizure 5.Right to appear in court

# Part XII — Miscellaneous Provisions

0Directives by the Minister 61. Regulations 62.Directives, codes, and guidelines .Priority of the Act 64. Transitional provisions 65. Interpretation 66. Citation SChEDUI

# NIGERIA DATA PROTECTION ACT, 2023

# ACT No. 37