In a recent ruling, the Federal High Court invalidated certain sections of the Nigeria Data Protection Commission’s (NDPC) Guidance Notice for Registration, citing conflicts with the Nigeria Data Protection Act 2023 (NDPA). This judgment provides some clarity to data controllers and processors previously impacted by overly broad compliance requirements while signaling potential changes to the regulatory framework for registration.

This alert highlights the judgment’s key implications, including the nullification of fiduciary relationship-based registration and some instances of third-party agent/vendor registration.

To stay ahead of potential regulatory revisions in privacy and data protection, contact TEMPLARS Partner, Ijeoma Uju, Managing Counsel Oghomwen, Akpaibor, or Senior Associate, Okabonye Chukwuani.