Court Ruling Transforms Nigeria's Data Protection Landscape

The Federal High Court delivered a judgment in the case of Emmanuel Harunna vs. Nigeria Data Protection Commission (NDPC), affirming the NDPC's authority to regulate major data handlers, including decentralized Point-of-Sale (PoS) agent networks.

Mr. Moses Braimah, CEO of Computics Limited, welcomed the ruling, stating it ends the era of viewing data protection as solely an IT responsibility and opens up significant economic opportunities in Nigeria. The judgment empowers the NDPC to enforce compliance, with penalties for non-compliance reaching up to N10 million or two percent of annual gross revenue, depending on the violation's severity.

Organizations classified as Data Controllers or Processors of Major Importance must now register, conduct compliance audits, and enhance internal governance. This requirement will create demand for licensed Data Protection Compliance Organizations, cybersecurity professionals, privacy lawyers, compliance auditors, and certified Data Protection Officers.

The ruling also has implications for government revenue through registration fees and compliance filings, contributing to the formal digital economy.