Nigeria Data Protection Commission Extends Registration Deadline For Data Controllers And Processors

The Nigeria Data Protection Commission (NDPC) has announced an extension for the registration of Data Controllers and Data Processors of Major Importance (DCPMIs) to October 31, 2024.

This new deadline allows eligible organizations to register without penalty.

Key Requirements:

Registration Compliance: DCPMIs must ensure agents and contractors processing personal data are registered with the Commission by October 15, 2024.

Accountability: DCPMIs are responsible for ensuring compliance with the Nigeria Data Protection Act, 2024 (NDP Act) principles and obligations.

NDP Act Provisions:

Section 29(1)(a) mandates data controllers and processors to engage only registered data processors.
– Section 65 defines a data processor as an individual or entity processing personal data on behalf of a data controller.

Consequences of Non-Compliance:

– Engaging unregistered data processors contravenes the NDP Act.
– Failure to comply may result in sanctions or penalties.

The extension aims to provide additional time for organizations to comply with registration requirements and implement necessary data protection measures.