A new bill mandating social media platforms, data controllers, and data processors operating in Nigeria to establish physical offices within the country has successfully passed its first reading in the Senate.
The legislation is titled “A Bill for an Act to Amend the Nigeria Data Protection Act, 2023, LFN, to Require Social Media Platforms to Establish Physical Offices within the Territorial Boundaries of the Federal Republic of Nigeria, and for Related Matters.”
This proposed legislation aims to enhance compliance with global data protection standards and improve Nigeria’s economic and security landscape.
Senator Ned Nwoko (PDP-Delta), who sponsored the bill, emphasised that the amendment seeks to facilitate the swift resolution of complaints and strengthen stakeholder confidence.
Senator Nwoko proposed an amendment to Section 5 of the NDPC Act 2023, adding a new clause P, which states that
the commission shall mandate all data controllers, data processors, or operators of social media platforms to establish and maintain a physical office within the territorial boundaries of the Federal Republic of Nigeria.
Failure to comply with this requirement for a continuous period of 30 days shall render the entity liable to a prohibition from conducting operations within the jurisdiction of Nigeria.”
Additional Information
Nwoko proposed revising Section 65 of the Principal Act to add new definitions:
Data Controllers: Entities determining the purposes and means of personal data processing, responsible for compliance with data protection laws.
Data Processors: Entities managing personal data on behalf of a data controller, following specific instructions without control over processing objectives or methods.
Physical Offices: Established business locations in Nigeria, staffed to interact with regulators and the public for legal and operational duties.
