Process information for defined, explicit and legitimate purposes only

Home / Process information for defined, explicit and legitimate purposes only

Process information for defined, explicit and legitimate purposes only

Since the coming into effect of the NDPA, businesses engaged in processing of personal information in Nigeria must ensure that there is a legitimate purpose for the information they collect from individuals. The NDPA lists 6 different grounds of legitimate data processing activities under the Act. The six recognized grounds are.

Consent of the data subject
Pursuit of a legitimate interest of the business organisation.
Contractual necessity where the data subject is a party to the contract
To comply with a legal obligation of the business organisation
To protect the vital interest of the data subject
To fulfill a public duty imposed by law on the organisation.

Any processing of personal information that goes outside the scope of these 6 grounds is illegal and will result in penalties under the law.