Tinubu Signs Data Protection Bill Into Law As Bureau Becomes Commission

President Bola Tinubu has signed the Nigerian Data Protection Bill Into Law, to strenghten Nigeria’s place on the global map of digital economy.

A statement issued on Wednesday by the Head, Legal Endorsement and Regulations of the Nigerian Data Protection Bureau (NDPB), Babatunde Bamigboye, noted that the President gave his assent to the Bill on Monday, June 12, 2023 as Nigeria leaps forward in the global data race.

While applauding the President for renewing the hope of over 200 million Nigerians in the advancement of privacy rights and other fundamental freedoms both in cyberspace and in analogue transactions, the National Commissioner of NDPB, Dr. Vincent Olatunji, equally expressed high optimism on the prospects of Nigeria’s Digital Economy following the emerging regulatory dispensation.

The Nigeria Data Protection Bureau, pursuant to the express provisions of the new Act, has transmuted into a full-fledged Commission and it is mandated to, among others, regulate the deployment of technological and organisational measures to enhance personal data protection; foster the development of personal data protection technologies, in accordance with recognised international best practices and applicable international law and conduct investigations into any violation of a requirement under the Act.

Others include; to impose penalties in respect of any violation of the provisions of the Act or subsidiary legislation made thereof; where necessary, accredit, license, and register suitable persons to provide data protection compliance services; issue regulations, rules, directives and guidance under the Act; and register data controllers and data processors of major importance.

The statement added that the Act is one of the strategic ways of meeting the campaign promise of President Tinubu, of creating one million jobs in the Digital Economy sector. About 500,000 jobs are expected to be created through the training of Data Protection Officers and licensing of Data Protection Compliance Organizations to offer services to data controllers and processors.