Nigeria: Fiduciary Duty and Data Protection: Examining the Court’s Decision in Frank Ijege v Nigeria Data Protection Commission

On 22nd November 2024, the Federal High Court in Frank Ijege v Nigeria Data Protection Commission (Suit No. FHC/KD/CS/34/2024) delivered a landmark decision invalidating certain provisions of the Guidance Notice on the Registration of Data Controllers and Data Processors of Major Importance, issued by the Nigeria Data Protection Commission (NDPC).

Chukwuyere Izuogu, from Streamsowers & Köhn (Lexing Nigeria) analyses the Federal High Court’s decision, examine the judgment’s implications for the fiduciary obligations of data controllers and processors toward data subjects, shedding light on its significance within the broader context of Nigeria’s evolving data protection framework.

This analysis also offers critical insights into the development of data protection law and jurisprudence, while emphasising its impact on regulatory compliance and the scope of NDPC’s authority to designate data controllers and data processors of major importance.

Read full article