• Senior Associate

Data Protection Week 2024, Your Data, Your Rights.

In a world where data is currency, data protection is your strongest defence against digital threats. This Data Protection Week we have unravelled the intricacies of data protection to equip you with the tools to ensure a safer online experience for yourself and others. Empower yourself with knowledge by watching our video to fortify your digital security for a better privacy landscape tomorrow.

  1. What is data protection?

Data protection is a mechanism or process put in place to safeguard personal data.

  1. What is personal data?

Personal data is any information which identifies directly or indirectly or is capable of identifying a living person.

  1. When does data protection apply?

Data protection applies when information belonging to a person (data subject) is used in some manner by some other person or entity that is not purely for personal or household activities.

  1. What is the importance of data protection?

The whole essence of data protection is to guarantee the privacy rights and freedoms of individuals in the digital economy.

  1. What are data subjects’ rights?

They are rights given to individuals by law, enabling them to control how their personal data are used. They include:

  • Right to be informed about how your personal information is being processed by an entity or a person or group of persons.
  • Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information an entity holds about you and to check how the entity is lawfully processing it.
  • Request correction of the personal information that an entity holds about you. This enables you to have any incomplete or inaccurate information an entity holds about you corrected.
  • Request erasure of your personal information. This enables you to ask an entity to delete or remove personal information where there is no good reason for them to continue to process it. You also have the right to ask the entity to delete or remove your personal information where you have exercised your right to object to processing.
  • Object to processing of your personal information where an entity is relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object when an entity is processing your personal information for direct marketing purposes.
    • Request the restriction of processing of your personal information. This enables you to ask an entity to suspend the processing of personal information about you, for example, if you want the entity to establish its accuracy or the reason for processing it.
  1. What is the main law that governs data protection in Nigeria?

The Nigeria Data Protection Act, 2023 is the main law that governs data protection in Nigeria.

  1. Why do you need to comply?
  • To avoid fines up to 10 million or 2% of annual gross revenue whichever is greater.
  • To avoid litigation.
  • To avoid reputational damage.

Get more publications like this straight to your inbox.

Our perspectives on investment locally and globally, business opportunities in a challenging environment, delivered to your inbox monthly.