TECHDIGEST – President Bola Tinubu has signed the Nigeria Data Protection Bill, 2023 into law. The Nigeria Data Protection Act, 2023 provides a legal framework for the protection of personal information, and the practice of data protection in Nigeria.

The bill was introduced to the Senate and House of Representatives for consideration and passage on Tuesday, 4 April 2023 via a letter from former President Muhammadu Buhari.

Now an Act, the new law establishes the Nigeria Data Protection Commission and replaces the Nigeria Data Protection Bureau (NDPB) established by President Buhari in February 2022. The Commission will be led by a National Commissioner with the responsibility for regulating the processing of personal information.

Part of the mandates of the Commission include to foster the development of personal data protection technologies, in accordance with recognised international good practices and ensure compliance with data protection obligations.

Among others, it will also have the powers to register data controllers and data processors of major importance; promote awareness on the obligation of data controllers and data processors, as well as sanction those who violate the provisions of the Act.

READ ALSO: Seven Facts To Know About The Student Loan Act 

Under the Act, a National Commissioner for the Commission will be appointed by the President for a term of four years which is renewable once. The national Commissioner will be responsible for its daily administration and execution of policies. The Commission will also have a Governing Council responsible for formulating policy direction for its affairs, approving strategic, action and budget plans for the Commission, among others.

A data controller is required to provide certain information to a data subject (that is the person whose data is being requested) before collection. Some of these information include the identity and address of business of the collector or processor, specific lawful basis to process the data, recipients of the data, data retention period and the right to lodge a complaint to the Commission, among others.

“The Commission is expected to have powers to make compliance and enforcement orders against data controllers or processors in the event of the violation of the provisions of the bill or related subsidiary legislation. The orders of the Commission are subject to judicial review within 30 days from when they are made.

“The Act also criminalises failure to comply with the orders of the Commission, which is punishable by a fine and or imprisonment term. A data subject may also seek damages from a data controller through civil proceedings, in the event of a violation.

READ ALSO: NITDA, Mara, to train 500,000 Govt Employees On Blockchain 

The new law “sets out principles for the processing of personal data, some of which include that it must be done in a fair, lawful and transparent manner, that it is limited to the minimum necessary for the purpose it is collected and is not retained for longer than necessary.”

“The law specifically states that the burden of proof is on a data controller to establish that he or she received the consent of the data subject before collecting his or her data. Silence or inactivity of the data subject will not be taken to imply consent.

A child does not have capacity to consent and a person with capacity to consent such as a parent, can do so on behalf of a child. A data subject has the right to withdraw consent to the processing of his or her personal data. In that situation, the data controller is expected to discontinue processing the data of such a person unless the controller shows public interest or other legitimate grounds, which override the fundamental rights, freedoms and the interests of the data subject.

A data subject (a person whose information is collected) has the right to obtain information with regard to the processing, storage and other relevant information about his or her data, from a data controller.

A data controller is mandated to inform the Commission if a data breach occurs. The data controller is also required to inform the data subject of the breach if it is likely to result in high risk to the rights and freedoms of the subject.”

The Nigerian Data Protection Act represents a significant step toward safeguarding privacy rights, fostering trust, and promoting responsible data-driven innovation.

Source : ITedgeNews

The post Tinubu Signs Data Protection Bill into law appeared first on Tech Digest News.

TECHDIGEST – The Federal Executive Council (FEC) at its meeting today 25th February, 2022 approved the Nigeria Data Protection Bill. By virtue of this historic approval, the Bill will now be transmitted to the National Assembly as an Executive Bill through the office of the Hon. Minister of Justice and Attorney General of the Federation.

It will be recalled that President Muhammadu Buhari approved the establishment of the Nigeria Data Protection Bureau on the 4th of February 2022. The Bureau was mandated to, inter alia, implement the Nigeria Data Protection Regulation (NDPR) and to coordinate the passage of an enabling Act for data protection. The Vice President, Prof. Yemi Osinbajo presided at the FEC meeting.

READ ALSO: NITDA To EU EOM: FG Safeguarding Digital Space To Ensure Successful Election

The pioneer Hon. Minister of Communications and Digital Economy, Prof. Isa Ali Ibrahim Pantami the Bill to the Federal Executive Council. The central objective of the Bill is to safeguard the fundamental rights and freedoms, and the interests of data subjects, as guaranteed under the Constitution of the Federal Republic of Nigeria, 1999, by —

providing for the regulation of processing of personal data;

promoting data processing practices that safeguard the security of personal data and privacy of data subjects;

ensuring that personal data is processed in a fair, lawful and accountable manner;

protecting data subjects’ rights, and providing means of recourse and remedies, in the event of the breach of the data subject’s rights;

ensuring that data controllers and data processors fulfil their obligations to data subjects;

establishing an impartial, independent, and effective regulatory Commission to superintend over data protection and privacy issues, and supervise data controllers and data processors; and

strengthen the legal foundations of the national digital economy and guarantee the participation of Nigeria in the regional and global economies through the beneficial trusted use of personal data

The National Commissioner and CEO, NDPB, Dr. Vincent Olatunji who accompanied the Hon. Minister to the FEC calls on all stakeholders to cooperate with the Federal Government in ensuring the sustainability of the abundant opportunities in Nigeria’s digital economy.

With the full support demonstrated by the administration of President Muhammadu Buhari, a clear signal has been sent to the global data processing ecosystem that Nigeria is committed to safeguarding fundamental rights and freedoms of Nigerian citizens which may be impacted one way or the other by the activities of data controllers and data processors.

The post FEC Approves Data Protection Bill For Transmission To National Assembly  appeared first on Tech Digest News.