Data Privacy and Consumer Protection in Nigeria's Digital Economy: A Legal Examination of the Nigeria Data Protection Act, 2023

This article critically examines the Nigeria Data Protection Act (NDPA), 2023 as a legislative response to growing 
concerns about data privacy and consumer protection within Nigeria’s rapidly evolving digital economy. Against the 
backdrop of increasing reliance on digital platforms and personal data, the study explores how the NDPA addresses 
systemic risks to consumer rights, such as data breaches, unauthorized processing, and identity theft. Adopting a 
doctrinal research methodology, the article analyzes the Act’s legislative and regulatory framework, highlights its key 
provisions—such as lawful basis for data processing, rights of data subjects, cross-border data transfer rules, and the 
establishment of the Nigeria Data Protection Commission (NDPC)—and evaluates their impact on consumer 
protection. The paper further provides a comparative assessment of the NDPA against global data protection 
benchmarks, particularly the European Union’s General Data Protection Regulation (GDPR) and South Africa’s 
Protection of Personal Information Act (POPIA). Key challenges identified include institutional limitations, lack of 
public awareness, inadequate cybersecurity infrastructure, and regulatory gaps regarding emerging technologies. To 
enhance the NDPA’s effectiveness, this article recommends strategic reforms, such as strengthening the NDPC, 
expanding public education, refining legal provisions on data subject rights, and fostering regional and international 
collaboration. This study concludes that while the NDPA marks a significant milestone in Nigeria’s data governance 
landscape, sustained implementation efforts are necessary to protect consumer rights and build a trustworthy digital 
ecosystem.