By The Nigeria Data Protection Commission (NDPC) given all entities, including businesses, educational institutions, healthcare providers, and other organisations that collect personal data of individuals an ultimatum to register with the NDPC.
The Commission in a post on its verified FaceBook page said that the registration is ongoing and mandatory in accordance with Section 5(d) of the Nigeria Data Protection Act of 2023.
“If your operations involve the collection and processing of personal data such as students’ records, client information, patient details, customer data, or any other personal information, whether for commercial or non-commercial purposes, you are required to register as either a Data Controller or Data Processor”, the statement said.
Registration can be completed through the official NDPC Registration Portal.
According to the NDPC, the registration ends on June 30th, 2024 saying that entities that fail to register within this timeframe will be subject to penalties.
Under the Nigeria Data Protection Act, 2023, it is illegal to process personal data without proper registration. Failure to comply with registration requirements constitutes an offense punishable by law.
The obligation to register applies to Data Controllers and Processors of major importance.
