Africa: Privacy

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
Faith-Based Organisations And Data Protection In Nigeria: Why Audit Obligations Should Not End With Registration Exemptions
The Nigeria Data Protection Act and the General Application and Implementation Directive provide a comprehensive legal framework for the protection of personal data in Nigeria. The Act applies its provisions to data controllers and processors domiciled, resident, or operating in Nigeria, with the principal exception being processing undertaken solely for personal or household purposes.
Nigeria Privacy
SA
S.P.A. Ajibade & Co.
Article
Updates On The Recent Activities And Other Developments In The Privacy Sector
The Federal High Court has affirmed the statutory powers of the Nigeria Data Protection Commission (NDPC) to register Data Controllers and Data Processors of Major Importance (DCPMIs) under the Nigeria Data Protection Act (NDPA), 2023. In a judgment delivered on 28 July 2026 by Honourable Justice F.N. Ogazi in Emmanuel Harunna v. Nigeria Data Protection Commission (FHC/L/CS/1116/2024), the court dismissed the applicant’s contention that Point of Sale (PoS) agents should not be classified as Data Controllers or Processors subject to the Commission’s registration regime.
Nigeria Privacy
SA
S.P.A. Ajibade & Co.
Article
Registration Of Data Controllers And Data Processors – A Legal Conundrum Clarified In The Case Of Emmanuel Haruna v. Nigeria Data Protection Commission
The Nigeria Data Protection Commission's controversial Guidance Notice requiring registration of Data Controllers and Processors of Major Importance sparked legal challenges and widespread debate over regulatory authority, privacy rights, and compliance obligations. A landmark Federal High Court ruling has now clarified the scope and validity of these registration requirements, establishing binding precedent on who must register and under what circumstances.
Nigeria Privacy
A
Alliance Law Firm
Article
Privacy After Death: Nigeria’s Jurisprudential Gap In Data Protection Law
Nigerian data protection law remains silent on what happens to personal data after death, creating a legal vacuum that has allowed the posthumous exposure of sensitive information belonging to prominent figures. This article examines whether privacy rights should extend beyond biological death, drawing on recent high-profile cases and proposing legislative reforms to protect the deceased and their surviving families.
Nigeria Privacy
A
Alliance Law Firm
See more

Related Country Guides

DP
Data Privacy

Privacy Protection

Article
Faith-Based Organisations And Data Protection In Nigeria: Why Audit Obligations Should Not End With Registration Exemptions
The Nigeria Data Protection Act and the General Application and Implementation Directive provide a comprehensive legal framework for the protection of personal data in Nigeria. The Act applies its provisions to data controllers and processors domiciled, resident, or operating in Nigeria, with the principal exception being processing undertaken solely for personal or household purposes.
Nigeria Privacy
SA
S.P.A. Ajibade & Co.
Article
Updates On The Recent Activities And Other Developments In The Privacy Sector
The Federal High Court has affirmed the statutory powers of the Nigeria Data Protection Commission (NDPC) to register Data Controllers and Data Processors of Major Importance (DCPMIs) under the Nigeria Data Protection Act (NDPA), 2023. In a judgment delivered on 28 July 2026 by Honourable Justice F.N. Ogazi in Emmanuel Harunna v. Nigeria Data Protection Commission (FHC/L/CS/1116/2024), the court dismissed the applicant’s contention that Point of Sale (PoS) agents should not be classified as Data Controllers or Processors subject to the Commission’s registration regime.
Nigeria Privacy
SA
S.P.A. Ajibade & Co.
Article
Artificial Intelligence And The Right To Privacy Under Section 37 Of The Constitution Of The Federal Republic Of Nigeria, 1999 (As Amended).
Nigeria's adoption of AI-powered facial recognition at major airports and automated credit scoring by digital lenders raises urgent questions about constitutional privacy protections. With Section 37 of the 1999 Constitution drafted before modern biometric surveillance existed, can its guarantee of privacy extend to algorithmic profiling and mass data collection?
Nigeria Technology
A
Alliance Law Firm
See more

Data Protection

Article
Another Tale Of Two Cities: The Standard Of Care For Banks In Uganda And Kenya
Two East African courts examined nearly identical bank fraud cases involving stolen phones and self-registration, yet reached opposite conclusions about who bears the loss. The divergent rulings in Kenya and Uganda expose fundamental questions about what duty of care banks owe customers in the digital age, and whether authentication alone absolves institutions of responsibility for preventable system failures.
Uganda Finance
E
ENS
Article
Unique Identifiers: The POPIA Issue That Can Derail Data Commercialisation Or Monetisation
South African organisations pursuing data monetisation initiatives face a critical regulatory requirement under POPIA that many overlook: using unique identifiers to link datasets across entities may require prior authorisation from the Information Regulator. This legal blind spot affects customer-360 programmes, AI initiatives, data enrichment projects, and commercial partnerships where identifiers like ID numbers or customer references are used to match information between responsible parties.
South Africa Media & IT
E
ENS
Article
Faith-Based Organisations And Data Protection In Nigeria: Why Audit Obligations Should Not End With Registration Exemptions
The Nigeria Data Protection Act and the General Application and Implementation Directive provide a comprehensive legal framework for the protection of personal data in Nigeria. The Act applies its provisions to data controllers and processors domiciled, resident, or operating in Nigeria, with the principal exception being processing undertaken solely for personal or household purposes.
Nigeria Privacy
SA
S.P.A. Ajibade & Co.
See more

Latest Videos

See more