A new bill mandating social media platforms, data controllers, and processors operating in Nigeria to establish physical offices within the country has passed its first reading in the Senate.
The bill, titled “A Bill for an Act to Alter the Nigeria Data Protection Act, 2023,” aims to enhance compliance with data protection standards and strengthen Nigeria’s economic and security landscape.
Sponsored by Senator Ned Nwoko (PDP-Delta), the amendment proposes adding a new article to the Nigeria Data Protection Commission (NDPC) Act of 2023. The bill stipulates that entities failing to establish physical offices within 30 days may face a prohibition from operating within Nigeria. This measure is intended to ensure swift complaint resolution and bolster stakeholder confidence.
The bill provides detailed definitions for key terms. For example, “Data Controllers” are entities responsible for determining the purpose and means of processing personal data, while “Data Processors” act on instructions from controllers. “Physical Offices” are defined as fixed business locations within Nigeria, staffed to interact with regulators, stakeholders, and the public. Social media operators are identified as those managing digital platforms that enable user interactions.
If passed, the proposed amendment is expected to facilitate better oversight and engagement between platforms, users, and regulators. This could help resolve data-related disputes, enhance accountability, and align Nigeria with global data protection practices. Additionally, it could stimulate job creation and investments as companies establish local operations.
The bill, which builds on the Nigeria Data Protection Act signed by President Bola Tinubu in 2023, will now proceed to further readings in the Senate for debates and refinements. Its approval would mark a significant step in Nigeria’s digital regulatory framework.