The White Elephant Classification of Data Controllers and Processors of Major Importance in Nigeria

The Nigerian Federal Government recently passed the Nigerian Data Protection Act 2023 into law which creates a special class of data controllers and processors of major importance who are subject to more stringent regulatory oversight. This article critically assesses the provisions of the Nigerian Data Protection Act 2023 as well as the Guidance Notice on the Registration of Data Controllers and Processors of Major Importance issued by the Nigerian Data Protection Commission in 2024. The article engages in a brief comparative analysis with the position in the European Union under the General Data Protection Regulations 2018 and makes recommendations for the Nigerian regulator.

尼日利亚联邦政府近日正式将《2023年尼日利亚数据保护法》签署为法律，该法案创设了一类具有重要地位的特殊数据控制者（data controller）与数据处理者（data processor）主体，并对其施以更为严格的监管监督。本文对《2023年尼日利亚数据保护法》的各项条款，以及尼日利亚数据保护委员会（Nigerian Data Protection Commission）2024年发布的《重要数据控制者与处理者注册指引公告》展开批判性评估；同时，本文还针对欧盟《2018年通用数据保护条例（General Data Protection Regulations）》所确立的相关规制立场开展简要对比分析，并为尼日利亚监管机构提出优化建议。