---
title: "Nigeria — Data Subject Rights | Data Protection Monitor"
canonical: https://dataprotection.gi/jurisdictions/nigeria/data-subject-rights/
source_html: /jurisdictions/nigeria/data-subject-rights/index.html
description: "Nigeria — Data Subject Rights: data_subject_rights Data Subject Rights 5 sub-modules 4 claims Amber ▾ # Rights are enumerated and in force, but response-window deadlines are not confirmed from available sources. Pri"
generated_at: 2026-10-25T04:46:50Z
content_sha256: 87bda7f3c569af440a0faedee31a3b4439678255036978cf287dd13fbf45126b
generator: "fe-fleet/md-twin@1.0"
---
# Nigeria — Data Subject Rights | Data Protection Monitor

### D3Data Subject Rights5 sub-modules4 claimsAmber▾#

Rights are enumerated and in force, but response-window deadlines are not confirmed from available sources.

Primary framework Nigeria Data Protection Act, 2023 (NDPA), Part VI

Supervisory authority [Nigeria Data Protection Commission (NDPC)](https://ndpc.gov.ng/)

Traffic-light rationale — Amber Rights are enumerated and in force, but response-window deadlines are not confirmed from available sources.

#### Sub-modules (5)

#### Access RightAmber

General rights of a data subject are set out in Section 34 NDPA.

Claims (1):

- Part VI of the NDPA (Section 34) sets out the general rights of a data subject, including withdrawal of consent under Section 35.

#### Rectification And ErasureAmber

Rectification/erasure rights fall within the general Section 34 rights bundle; no separately confirmed provision text located.

Claims (1):

- Part VI of the NDPA (Section 34) sets out the general rights of a data subject, including withdrawal of consent under Section 35.

#### Restriction And ObjectionGreen

Right to object is set out in Section 36 NDPA.

Claims (1):

- Section 36 of the NDPA provides data subjects a right to object to processing.

#### Data PortabilityGreen

Data portability right is set out in Section 38 NDPA.

Claims (1):

- Section 38 of the NDPA provides for a data portability right, alongside Section 37's provisions on automated decision making.

#### Deadlines And Response WindowsRed

No confirmed statutory response-window deadline for data subject rights requests was located in this research pass.

Category narrative 59 words

Part VI of the NDPA (Sections 34-38) enumerates data subject rights including general rights, withdrawal of consent, right to object, automated decision-making protections, and data portability. Specific statutory deadlines for controller response windows (analogous to GDPR's one-month SAR window) were not confirmed in the sources reviewed and should be verified against the full Act text or forthcoming NDPC guidance.

Evidence 4

Sources and claims (4)
- Probable[National Assembly / hosted via DataGuidance](https://www.dataguidance.com/sites/default/files/nigeria_data_protection_establishment_etc._bill_2023.pdf) — Part VI of the NDPA (Section 34) sets out the general rights of a data subject, including withdrawal of consent under Section 35.observed 2026-08-07
- Probable[National Assembly / hosted via DataGuidance](https://www.dataguidance.com/sites/default/files/nigeria_data_protection_establishment_etc._bill_2023.pdf) — Section 36 of the NDPA provides data subjects a right to object to processing.observed 2026-08-07
- Probable[National Assembly / hosted via DataGuidance](https://www.dataguidance.com/sites/default/files/nigeria_data_protection_establishment_etc._bill_2023.pdf) — Section 38 of the NDPA provides for a data portability right, alongside Section 37's provisions on automated decision making.observed 2026-08-07
- Uncertain[NDPC](https://ndpc.gov.ng/wp-content/uploads/2025/07/NDP-ACT-GAID-2025-MARCH-20TH.pdf) — No confirmed statutory deadline for controller response to data subject rights requests was located in the sources reviewed for NG.observed 2026-08-07