Data Protection Monitor
Global Privacy & Data Protection Intelligence

Nigeria (NG) · Module Detail

Nigeria: Children & Vulnerable Groups

← Full Nigeria overview Build report with Nigeria Request deeper dive

#

Section 31 confirms a children/incapacitated-persons category exists in force, but implementation specifics (age threshold, parental consent mechanics, profiling bans) remain unconfirmed.

Primary frameworkNigeria Data Protection Act, 2023 (NDPA), Section 31
Supervisory authorityNigeria Data Protection Commission (NDPC)
Traffic-light rationale — AmberSection 31 confirms a children/incapacitated-persons category exists in force, but implementation specifics (age threshold, parental consent mechanics, profiling bans) remain unconfirmed.

Sub-modules (5)

Age VerificationRed

No confirmed statutory age-verification mechanism was located.

Minor Profiling BansRed

No confirmed minor-specific profiling ban was located distinct from general Section 37 automated-decision-making protections.

Education SettingsRed

No confirmed statutory education-settings-specific children's-data rule was located; NDPC pursues voluntary university partnerships.

Dependent AdultsAmber

Section 31's 'persons lacking legal capacity to consent' language extends coverage to dependent adults, though implementation specifics are unconfirmed.

Claims (1):

  • Section 31 of the NDPA (Part V) addresses processing of data belonging to children or persons lacking the legal capacity to consent, establishing a distinct consent-capacity category under the Act.
Category narrative100 words

Section 31 of the NDPA addresses 'Children or persons lacking the legal capacity to consent,' establishing a distinct legal basis category for processing data of minors and incapacitated persons. However, granular thresholds — the precise minimum age of consent, parental-consent verification mechanics, and any minor-specific profiling ban — were not confirmed from the sources reviewed and require verification against the full statutory text or forthcoming NDPC guidance. NDPC has pursued voluntary sector partnerships (e.g., with universities) but no confirmed statutory education-settings-specific children's-data rule, nor a dependent-adults-specific regime beyond the general 'persons lacking legal capacity' language in Section 31, was located.

Sources and claims (2)
  1. ProbableNational Assembly / hosted via DataGuidance — Section 31 of the NDPA (Part V) addresses processing of data belonging to children or persons lacking the legal capacity to consent, establishing a distinct consent-capacity category under the Act.observed
  2. UncertainNational Assembly / hosted via DataGuidance — No confirmed minimum-age threshold or age-verification mechanism under the NDPA/GAID was located in this research pass.observed