The Nigeria Data Protection Commission (NDPC) has secured what could become one of the most consequential judicial endorsements of Nigeria’s data protection framework since the enactment of the Nigeria Data Protection Act (NDPA), 2023, with a Federal High Court ruling affirming the Commission’s statutory authority to require the registration of Data Controllers and Data Processors of Major Importance (DCPMIs).
The judgment, delivered in Emmanuel Harunna v. Nigeria Data Protection Commission (FHC/L/CS/1116/2024), strengthens the legal foundation of Nigeria’s emerging privacy regulatory framework and provides judicial clarity on one of the NDPC’s most significant compliance requirements.
Beyond resolving the dispute before the court, the decision is expected to shape how organisations across banking, telecommunications, healthcare, education, digital services, e-commerce and financial technology approach compliance with Nigeria’s data protection laws.
This post was originally published on this site.





