Extraordinary
!img-0.jpeg
# Federal Republic of Nigeria Official Gazette
| No. 119 | Lagos - 1st July, 2023 | Vol. 110 | | --- | --- | --- |
Government Notice No. 82
The following is published as supplement to this Gazette :
| Act No. | Short Title | Page | | --- | --- | --- | | 37 | Nigeria Data Protection Act, 2023 | A719-758 |
Printed and Published by The Federal Government Printer, Lagos, Nigeria FGP 97/62023/1,200
Annual Subscription from 1st January, 2023 is Local : N50,000.00 Overseas : N65,000.00 [Surface Mail] N80,000.00 [Second Class Air Mail]. Present issue N3,500 per copy. Subscribers who wish to obtain Gazette after 1st January should apply to the Federal Government Printer, Lagos for amended Subscriptions.
A 718 2023 No. 37 Nigeria Data Protection Act, 2023
A 719
# NIGERIA DATA PROTECTION ACT, 2023
!img-1.jpeg ARRANGEMENT OF SECTIONS
Section :
PART I—OBJECTIVES AND APPLICATION
- Objectives
- Application
- Exemption of application
PART II — ESTABLISHMENT OF THE NIGERIA DATA PROTECTION COMMISSION, AND ITS GOVERNING COUNCIL
- Establishment of the Nigeria Data Protection Commission
- Functions of the Commission
- Powers of the Commission
- Independence of the Commission
- Establishment of the Governing Council of the Commission
- Appointment of members of the Council
- Tenure of members of the Council
- Cessation of membership
- Functions and powers of the Council
- Conflict of interest
PART III — APPOINTMENT OF THE NATIONAL COMMISSIONER, AND OTHER STAFF OF THE COMMISSION
- Appointment of the National Commissioner for the Commission
- Secretary to the Council
- Staff of the Commission
- Staff regulations and discipline
- Pension
PART IV — FINANCIAL PROVISIONS
- Funds of the Commission
- Expenditure of the Fund
- Power to borrow and accept gifts
- Account and audit
- Annual reports and estimates
A 720
2023 No. 37
Nigeria Data Protection Act, 2023
PART V — PRINCIPLES AND LAWFUL BASIS GOVERNING PROCESSING OF PERSONAL DATA
- Principles of personal data processing
- Lawful basis of personal data processing
- Consent
- Provision of information to the data subject
- Data privacy impact assessment
- Obligations of the data controller and data processor
- Sensitive personal data
- Children or persons lacking the legal capacity to consent
- Data Protection Officers
- Data protection compliance services
PART VI — RIGHTS OF A DATA SUBJECT
- Rights of a data subject
- Withdrawal of consent
- Right to object
- Automated decision making
- Data portability
PART VII — DATA SECURITY
- Security, integrity, and confidentiality
- Personal data breaches
PART VIII — CROSS-BORDER TRANSFERS OF PERSONAL DATA
- Basis for cross-border transfer of personal data
- Adequacy of protection
- Other bases for transfer of personal data outside Nigeria
PART IX — REGISTRATION AND FEES
- Registration of data controllers and data processors of major importance
- Fees and levies