CORPORATE RESPONSIBILITY AND DATA PRIVACY UNDER THE NIGERIA DATA PROTECTION ACT: LEGAL OBLIGATIONS OF DATA CONTROLLERS AND PROCESSORS
Abstract
The demand for and generation of personal information of individuals by
corporate entities are accelerating with the advancement and engagement of
technology, in the regulation of human activities. According to Statista, the
amount of information created, copied, captured and consumed worldwide
will go from 120 zettabytes in 2023 to 181 zettabytes in 2025. (One zettabyte is
one trillion gigabytes.)1As data continues to be released and sometimes shared
amongst interrelated organisations, their exposure and manipulation by
unwanted, unscrupulous elements increase. The criminal activities of hackers
to access and exploit data residing with these organizations are on a rampage,
that it is gradually becoming difficult to manage data against illegal
interference, thereby raising data security concerns. This Article studied the
obligations of corporations engaged in controlling and processing personal
data by a doctrinal research approach. It was found that data privacy has not
received the desired protection in Nigeria despite the enactment of the
Nigerian Data Protection Act, largely due to a lack of awareness of the relevant
laws. It was therefore recommended that periodic sensitization programs and
training be organized for the management and staff of these data corporations,
as well as the public on their rights, obligations and sanctions for noncompliance
with Data Privacy Laws.
corporate entities are accelerating with the advancement and engagement of
technology, in the regulation of human activities. According to Statista, the
amount of information created, copied, captured and consumed worldwide
will go from 120 zettabytes in 2023 to 181 zettabytes in 2025. (One zettabyte is
one trillion gigabytes.)1As data continues to be released and sometimes shared
amongst interrelated organisations, their exposure and manipulation by
unwanted, unscrupulous elements increase. The criminal activities of hackers
to access and exploit data residing with these organizations are on a rampage,
that it is gradually becoming difficult to manage data against illegal
interference, thereby raising data security concerns. This Article studied the
obligations of corporations engaged in controlling and processing personal
data by a doctrinal research approach. It was found that data privacy has not
received the desired protection in Nigeria despite the enactment of the
Nigerian Data Protection Act, largely due to a lack of awareness of the relevant
laws. It was therefore recommended that periodic sensitization programs and
training be organized for the management and staff of these data corporations,
as well as the public on their rights, obligations and sanctions for noncompliance
with Data Privacy Laws.
Full Text:
PDFRefbacks
- There are currently no refbacks.