By 
The Nigeria Data Protection Commission (NDPC) has announced an extension for the registration of Data Controllers and Data Processors of Major Importance (DCPMIs). The new deadline for registration without penalty is now set for October 31, 2024. This gives businesses additional time to comply with the regulations outlined in the Nigeria Data Protection Act (NDP Act) 2024.
RELATED: NDPC releases guidelines for registering key data controllers and processors
The extension was approved by NDPC National Commissioner/CEO, Dr. Vincent Olatunji. It aims to ensure greater accountability and compliance within Nigeria’s data privacy ecosystem. DCPMIs are reminded that starting from October 15, 2024, they can only engage agents and contractors for personal data processing. Entities not duly registered with the Commission cannot be engaged.
Legal Framework for Data Processors
In accordance with Sections 24(3), 29(1)(a), and 44 of the NDP Act, the Commission has emphasised that data controllers and processors must only work with entities that uphold the legal obligations set forth in the Act. Specifically, Section 29(1)(a) states that any data processor engaged by a data controller must comply with the principles and obligations applicable to the data controller.
Additionally, Section 65 of the NDP Act defines a data processor as any individual, private entity, public authority, or other body that processes personal data on behalf of a data controller or another data processor.
Compliance Requirements
According to Babatunde Bamigboye, Head of Legal, Enforcement & Regulations, the Commission urged all DCPMIs to ensure compliance. DCPMIs must ensure that those processing personal data on their behalf are registered. Failing to engage agents who comply with the obligations outlined in the NDP Act will result in violations of the law.
Organisations are encouraged to act swiftly to avoid penalties. They must ensure their operations are in full compliance with Nigeria’s evolving data protection standards.
This registration extension reflects the NDPC’s commitment to enhancing transparency and enforcing the Nigeria Data Protection Act. Â The law aims to safeguard citizens’ personal data in an increasingly digital world.
