NigeriaNigeria Data Protection Act, 2023 and GAID 2025, automated decisions
GAID 2025, art. 43(2)(a), under the Nigeria Data Protection Act, 2023 (automated decisions)
In force since .
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights
As of .
What it requires
- Give a data subject the right not to be subject to a decision based solely on automated processes or algorithms.
What this law does
Article 43 of the GAID requires a data controller or processor that deploys or intends to deploy Emerging Technologies, such as artificial intelligence, the Internet of Things or blockchain, to take the provisions of the Act into account when setting the technical and organisational parameters for that processing.
Those parameters must take into account a data subject's right not to be subject to a decision solely based on automated processes or algorithms, alongside the right to be forgotten, safeguards for sensitive and child data, cross-border transfer rules, and privacy by design. The parameters must be documented and filed with the Commission.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.