The Nigeria Data Protection Commission (NDPC) extends the registration deadline for Data Controllers and Data Processors of Major Importance

The Nigeria Data Protection Commission (“NDPC” or the “Commission”) has further extended the deadline for the mandatory registration of all “Data Controllers and Data Processors of Major Importance” (DCPMIs) from 30 September 2024 to the 31st of October 2024 without penalty.

Earlier this year, the Commission issued a Guidance Notice detailing the designation of DCPMI’s, classification, types, fees, penalties, and deadline for registration. Please see our detailed analysis here .

Entities designated as DCPMIs are therefore encouraged to take advantage of the extension and comply with the registration requirement before the new deadline of 31st of October 2024, in order to avoid sanctions or penalties from the NDPC.

In addition, the NDPC mandated that DCPMIs must only engage agents and contractors who are registered with the Commission for the processing of personal data, as at October 15, 2024. The NDPC also directed that any third-party processors previously engaged by DCPMIs should be encouraged to fulfil their legal obligations to register as DCPMIs, as well as ensure their compliance with the principles and obligations set out in the Nigerian Data Protection Act, 2023 that are applicable to the data controller, and to avoid contravention of the Act.

For more information on this, please contact us at [email protected]?

?

?

?