A deadline has been given for the registration of Data Controllers and Data Processors of Major Importance (DCPMIs).
Also an order has been issued for the DCPMIs to only engage agents and contractors who are duly registered with the Commission (as at 15th October, 2024) for the processing of personal data.
A statement by the Nigeria Data Protection Commission National Commissioner/CEO, Dr. Vincent Olatunji approving the extension of deadline for registration without penalty is the 31st of October, 2024.
Section 65 of the NDP Act defines a data processor “as an individual, private entity, public authority, or any other body, who processes personal data on behalf of or at the direction of a data controller or another data processor.”
The Commission enjoined data controllers and data processors of major importance to immediately ensure that those who process personal data on their behalf fulfill the obligation to register as required by law. Engaging an agent or contractor who does not comply with the principles and obligations (set out in the NDP Act) that are applicable to the data controller is a contravention of the NDP Act.
