Data Protection Monitor
Global Privacy & Data Protection Intelligence

Nigeria (NG) · Module Detail

Nigeria: Data Subject Rights

← Full Nigeria overview Build report with Nigeria Request deeper dive

#

Rights are enumerated and in force, but response-window deadlines are not confirmed from available sources.

Primary frameworkNigeria Data Protection Act, 2023 (NDPA), Part VI
Supervisory authorityNigeria Data Protection Commission (NDPC)
Traffic-light rationale — AmberRights are enumerated and in force, but response-window deadlines are not confirmed from available sources.

Sub-modules (5)

Access RightAmber

General rights of a data subject are set out in Section 34 NDPA.

Claims (1):

  • Part VI of the NDPA (Section 34) sets out the general rights of a data subject, including withdrawal of consent under Section 35.

Rectification And ErasureAmber

Rectification/erasure rights fall within the general Section 34 rights bundle; no separately confirmed provision text located.

Claims (1):

  • Part VI of the NDPA (Section 34) sets out the general rights of a data subject, including withdrawal of consent under Section 35.

Restriction And ObjectionGreen

Right to object is set out in Section 36 NDPA.

Claims (1):

  • Section 36 of the NDPA provides data subjects a right to object to processing.

Data PortabilityGreen

Data portability right is set out in Section 38 NDPA.

Claims (1):

  • Section 38 of the NDPA provides for a data portability right, alongside Section 37's provisions on automated decision making.

Deadlines And Response WindowsRed

No confirmed statutory response-window deadline for data subject rights requests was located in this research pass.

Category narrative59 words

Part VI of the NDPA (Sections 34-38) enumerates data subject rights including general rights, withdrawal of consent, right to object, automated decision-making protections, and data portability. Specific statutory deadlines for controller response windows (analogous to GDPR's one-month SAR window) were not confirmed in the sources reviewed and should be verified against the full Act text or forthcoming NDPC guidance.

Sources and claims (4)
  1. ProbableNational Assembly / hosted via DataGuidance — Part VI of the NDPA (Section 34) sets out the general rights of a data subject, including withdrawal of consent under Section 35.observed
  2. ProbableNational Assembly / hosted via DataGuidance — Section 36 of the NDPA provides data subjects a right to object to processing.observed
  3. ProbableNational Assembly / hosted via DataGuidance — Section 38 of the NDPA provides for a data portability right, alongside Section 37's provisions on automated decision making.observed
  4. UncertainNDPC — No confirmed statutory deadline for controller response to data subject rights requests was located in the sources reviewed for NG.observed