Nigeria: Privacy Protection

When Nigerian Breweries used crowd footage from a sponsored event in its advertising campaign, it triggered a landmark data protection ruling. The Lagos High Court determined that identifiable photographs constitute personal data under Nigeria's 2023 Data Protection Act, and that generic venue notices cannot authorize commercial use of attendees' images.

The introduction of registration requirements for certain data controllers and data processors under the General Application and Implementation Directive (GAID) has significantly altered the compliance landscape of Nigeria's data protection regime. However, the registration framework has also given rise to a common misconception among organisations that fall below the prescribed registration thresholds or otherwise qualify for an exemption: namely, that exemption from registration translates into exemption from data protection obligations.

Organizations around the world depend on digital systems to collect and process personal information of employees, customers, and vendors. Over time, much of this information has migrated from traditional on-site infrastructure to cloud-based systems, changing the methods by which personal data is stored, managed, and transmitted across jurisdictions.

"Pseudonymisation" is one of those words that sounds more complex than it is, but its implications for data protection compliance in Nigeria are anything but simple.

Nigeria's agricultural sector is undergoing a profound digital transformation as smart farming technologies reshape traditional practices. As AI, IoT, and data analytics become integral to farming decisions...

Nigeria's data protection landscape has fundamentally shifted with the enactment of the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive 2025. This article examines the legal architecture governing cross-border data transfers, identifies critical compliance obligations for international technology transactions, and demonstrates how well-structured data compliance can serve as a competitive advantage in one of Africa's most dynamic digital markets.

It concludes that organisations that reduce unnecessary collection and define retention with precision are often in a stronger position not only to comply with the law, but also to reduce breach impact...

The rapid expansion of Nigeria’s digital economy has resulted in unprecedented levels of personal data generation and processing.

Recently, the Presidential Fiscal Policy and Tax Reforms Committee, during conversations about the recent tax reforms, confirmed that Nigeria receives significant financial information on Nigerian residents ...