Court Upholds NDPC's Data Registration Mandate

The Federal High Court in Abuja, presided over by Justice F.N. Ogazi, affirmed the authority of the Nigeria Data Protection Commission (NDPC) to mandate the registration of Data Controllers and Data Processors of Major Importance (DCPMIs).

This ruling came in response to a case (FHC/L/CS/1116/2024) where the applicant argued that Point of Sale (POS) agents should not be classified as DCPMIs and sought an injunction against the NDPC's registration requirement. The court dismissed the suit, stating that the NDPC acted within its statutory powers as outlined in the Nigeria Data Protection Act (NDPA).

Justice Ogazi emphasized that the NDPA promotes accountability and transparency in data governance and that the registration framework is essential for monitoring compliance. The court ruled that the registration requirement does not violate constitutional privacy rights but serves to protect them.

Following the ruling, Dr. Vincent Olatunji, the NDPC's National Commissioner and CEO, urged all relevant entities to register promptly to avoid legal liabilities.