The document is a comprehensive Regulation on data protection in Nigeria. It is a guide to assist data controllers and data administrators/processors in understanding the controls and measures they need to introduce into their operations in order to comply with the Nigeria Data Protection Regulation.
Protection of personal information Act No 4 of 2013
The Act promotes the protection of personal information processed by public and private bodies; introduces certain conditions so as to establish minimum requirements for the processing of personal information; provides for the establishment of an Information Regulator to exercise certain powers and to perform certain duties and functions in terms of this Act and the Promotion of Access to Information Act, 2000; provides for the issuing of codes of conduct; provides for the rights of persons regarding unsolicited electronic communications and automated decision making; etc.
This Act provides for the establishment of a national identity database and the National Identity Management Commission charge with the responsibilities for maintenance of the national database, the registration of individuals, and the issuance of general multipurpose identity cards; and for related matters.