The significance of Onimisi v GTCO lies principally in its practical enforcement of the NDPA’s direct-marketing protections. The decision confirms that a controller must establish a lawful basis for processing and, crucially, that once a data subject objects to direct marketing, the processing must stop.
Cross-border data transfers are central to modern digital commerce but expose personal data to different legal systems, cybersecurity risks and enforcement challenges. This article examines the framework established by sections 41–43 of the Nigeria Data Protection Act 2023 and the GAID 2025, with particular attention to adequacy, approved transfer instruments, alternative statutory grounds, organisational accountability and the practical compliance obligations of Nigerian businesses.
Nigeria’s expanding digital surveillance architecture, encompassing state security operations, biometric databases, fintech platforms and telecommunications infrastructure, has developed faster than the laws intended to regulate it. This article examines the constitutional and statutory framework governing digital surveillance and data privacy in Nigeria, identifies gaps in the NDPA and related legislation, and proposes a rights-centred regulatory framework founded on proportionality, judicial authorisation, effective institutional oversight and dedicated legislation for biometric data and communications interception.
Artificial intelligence is transforming legal practice by improving efficiency and changing how lawyers deliver legal services. This article examines the opportunities, challenges and ethical implications of AI and explains how Nigerian lawyers can harness technology to remain globally competitive.
The increasing collection and processing of personal information have raised significant concerns regarding privacy, cybersecurity, and the protection of individual rights. In Nigeria, these concerns are addressed through the constitutional right to privacy under the CFRN and the regulatory framework established by the NDPA, enforced by the NDPC. These legal mechanisms impose obligations on organisations to ensure lawful data processing, safeguard personal information, and uphold the rights of data subjects.
Nigeria’s digital privacy framework, anchored in the NDPA 2023, is evolving to meet global standards. However, challenges remain in enforcement, cybersecurity, and public awareness. A rights-based and security-conscious approach is essential for full realization.
The Act established the Nigerian Data Protection Commission (NDPC) to replace the Nigeria Data Protection Bureau as the regulator of data protection in Nigeria. The commission was empowered under Sections 61 & 62 of the Act to make regulations for carrying out its objectives.
In the digital age, data has emerged as the new oil, fueling innovation, economic growth, and societal transformation.
The Nigerian authorities, through agencies like the FCCPC and NDPC, have signaled their readiness to enforce compliance and safeguard consumer rights in the digital space. As regulatory landscapes become more proactive, operational transparency will no longer be optional. Instead, they will be prerequisites for sustainable success.
