Data cross-border

The Right to Object to Direct Marketing under the NDPA: A Review of Onimisi v GTCO (FHC/ABJ/CS/1181/2025)

The significance of Onimisi v GTCO lies principally in its practical enforcement of the NDPA’s direct-marketing protections. The decision confirms that a controller must establish a lawful basis for processing and, crucially, that once a data subject objects to direct marketing, the processing must stop.

Cross-Border Data Transfers Under the Nigeria Data Protection Act 2023: Legal Challenges and Regulatory Compliance in Nigeria

Cross-border data transfers are central to modern digital commerce but expose personal data to different legal systems, cybersecurity risks and enforcement challenges. This article examines the framework established by sections 41–43 of the Nigeria Data Protection Act 2023 and the GAID 2025, with particular attention to adequacy, approved transfer instruments, alternative statutory grounds, organisational accountability and the practical compliance obligations of Nigerian businesses.

Verified by MonsterInsights