A Nigerian federal court has upheld the authority of the country’s privacy watchdog to register major data controllers and processors, delivering a significant ruling for digital regulation in Africa’s most populous nation.
The Federal High Court in Lagos dismissed a challenge brought against the Nigeria Data Protection Commission (NDPC) by an applicant seeking to exempt Point of Sale (POS) agents from registering as “Data Controllers and Processors of Major Importance”.
Presiding Judge F.N. Ogazi ruled that the commission acted within its statutory mandate under the 2023 Nigeria Data Protection Act when requiring high-level data handlers to register with the authority.
In his judgment, Justice Ogazi noted that compulsory registration does not violate privacy rights, but rather serves as a vital statutory mechanism to ensure transparency, monitor compliance, and safeguard citizens’ personal data under constitutional protections.
Following the decision, the Chief Executive of the NDPC, Dr. Vincent Olatunji, directed all eligible data controllers to register immediately or face potential legal penalties.
The ruling establishes a key legal precedent for regulatory oversight as Nigeria rapidly expands its digital financial services sector.
Add Comment