ANNEXURE C: COUNTRIES WITH ADEQUATE DATA PROTECTION LAWS 43 NIGERIA DATA PROTECTION REGULATION 2019: IMPLEMENTATION FRAMEWORK1 1. BACKGROUND 1.1 The NDPR is the pioneer, comprehensive Regulation on data protection in Nigeria. NITDA, through a stakeholder model has developed this NDPR Implementation Framework (the ‘Framework’) as a guide to assist data controllers and data administrators/processors understand the controls and measures they need to introduce into their operations in order to comply with the NDPR. 1.2 The NDPR was issued on 25th January 2019 pursuant to section 6 (a) and (c) of the National Information Technology Development Agency Act 2007 (the ‘NITDA Act’). It was made in recognition of the fact that many public and private bodies have migrated their respective businesses and other information systems online. These information systems have thus become critical information infrastructure which must be safeguarded, regulated and protected against personal data breaches. Government further takes cognizance of emerging data protection laws and regulations in the international community geared towards protecting privacy, identity, lives and property as well as fostering the integrity of commerce and industry in the data and digital economy and has realised the imperative importance of developing data protection rules and regulations to protect the personal data of Nigerian citizens and residents. It is in view of this that an implementation framework for the NDPR becomes essential. The 1 Capitalised terms used herein and not otherwise defined herein shall have the meanings assigned to them in the Regulations, unless the context shall otherwise require. 3|Page