On 22nd November 2024, the Federal High Court in Frank Ijege v Nigeria Data Protection Commission (Suit No. FHC/KD/CS/34/2024) delivered a landmark decision invalidating certain provisions of the Guidance Notice on the Registration of Data Controllers and Data Processors of Major Importance, issued by the Nigeria Data Protection Commission (NDPC).
Chukwuyere Izuogu, from Streamsowers & Köhn (Lexing Nigeria) analyses the Federal High Court’s decision, examine the judgment’s implications for the fiduciary obligations of data controllers and processors toward data subjects, shedding light on its significance within the broader context of Nigeria’s evolving data protection framework.
This analysis also offers critical insights into the development of data protection law and jurisprudence, while emphasising its impact on regulatory compliance and the scope of NDPC’s authority to designate data controllers and data processors of major importance.
Our advice:
Want to find out more? For an overview of data protection law in Nigeria, read issue No. 40 of the Lexing network’s quarterly bilingual newsletter: Lexing Insights, Data protection in Africa, No. 40 July 2024.