Connect with us

Hi, what are you looking for?

Tech

NDPC Issues Guidance Notice on Registration of Data Controllers and Processors of Major Importance

NDPC-Olatunji

Nigeria Data Protection Commission has issued a Guidance Notice (NDPC/HQ/GN/VOL.02/24) to data controllers and processors of major importance in order to clarify the categories of organizations that are required to register with the Commission in line with the Nigeria Data Protection Act (NDPA) 2023. Relying on sections 5(d), 44 and 65 of the NDPA, organizations that are of “particular value or significance to the economy, society or security of Nigeria” are designated by the Commission as data controllers and processors of major importance.

According to the Guidance Notice dated 14th of February and signed by the Commission’s Head of Legal Enforcement and Regulations, Babatunde Bamigboye, Esq., “A data controller or data processor shall be deemed to have particular value or significance to the economy, society or security of Nigeria and hence designated to be of major importance if it keeps or has access to a filing system (whether analogue or digital) for the processing of personal data”.

In addition to this, the Commission also identified specific data processing such as those involving sensitive personal data, cloud computing, transborder data transfers, processing the personal data of over 200 data subjects and access to data storage platform of third parties in commercial transactions as necessary factors in considering organizations that are data controllers or processors of major importance.

In order to foster ease of doing business, particularly for small organizations involved in potentially high-risk data processing, the Commission varies the payable fees according to the level of Major Data Processing (MDP) involved. Major Data Processing (MDP) is classified into 3 levels, namely: Ultra High Level (UHL), Extra High Level (EHL) and Ordinary High Level (OHL) of Major Data Processing. The fees payable are N250,000, N100,000 and N10,000 respectively.

Organizations in the MDP-UHL categories include but are not limited to the following are:

  1. Commercial banks operating at national or regional level,
  2. Merchant Banks
  • Telecommunication companies,
  1. Insurance companies,
  2. Multinational companies,
  3. Payment gateway service providers;

Similarly, the following organizations, among others are Organizations within MDP-EHL category:

  1. Ministries, Departments and Agencies of government,
  2. Micro finance Banks,
  • Higher Institutions,
  1. Hospitals providing tertiary or secondary medical services, and
  2. Mortgage banks;

Lastly, at the MDP-EHL category we have organizations such as:

  1. Small and Medium Scale Enterprises (it must be such that have access to personal data which they may share, transfer, analyze, copy, compute or store in the course of carrying out their individual businesses)
  2. Primary and Secondary Schools
  • Primary Health Centres
  1. Agents, contractors and vendors who engage with data-subjects on behalf of other organizations.

The breakdown of the categories are contained in the Guidance Notice posted on the Commissions website www.ndpc.gov.ng.

The NDPC’s National Commissioner and CEO, Dr Vincent Olatunji, urged data controllers to eschew activities that may put citizens at risk especially when millions of Nigerians are sharing their personal data such as bank details, pictures, health and academic records online. According to Dr. Olatunji,

“The risks are getting higher even as the opportunities are also increasing, we are reminded of the warning by those in the frontiers of the 4th Industrial Revolution that we have a price to pay for liberty.

“The price is eternal vigilance. It is therefore important to properly and functionally identify the persons and the data processing to which we must direct the torch of vigilance. Registration is one in a continuum of measures we are taking in this regard. It is, however, the entry point of accountability going forward.”

 

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

ad

You May Also Like

News

With progress made in accelerating financial inclusion to unbanked and underbanked communities in Nigeria, the Shared Agent Network Expansion Facilities Limited (SANEF) has posited...

Tech

Meta has announced new measures to tackle spammy content on Facebook, aiming to enhance the Feed experience and support authentic creators. These updates are...

News

Nigerians have lost N4.8 trillion ($2.99 billion) to various scams since 2016, according to findings by Paul Alaje, a prominent Nigerian economist and chief...

Tech

MTN Nigeria has announced the rescheduling of the MTN Champs Grand Finale to honour the legacy of its founding Chairman, Mr. Pascal Gabriel Dozie,...