An Ibadan based lawyer, Mr. Jonathan Agbo has filed a suit challenging the move by the Nigeria Data Protection Commission (NDPC) to register Data Controllers and Processors.
In the suit with No. FHC/IB/CS/18/2024 filed on Wednesday, 14th February 2024 at the Federal High Court Ibadan, Mr. Agbo, a digital rights lawyer is asking the court to resolve the following questions:
- Whether or not by the combined interpretation of sections 5(d), 44 and 65 of the Nigeria Data Protection Act 2023, the Respondent can issue blanket notice(s) to all controllers to register with it without first designating controllers and processors of major importance
- Whether or not by the interpretation of section 65 of the Nigeria Data Protection Act 2023, Law Firms qualify as controllers or processors of major importance?
- Whether or not by the combined interpretation of section 37 of the Constitution of the Federal Republic of Nigeria, 1999 and section 1(1) of the Nigeria Data Protection Act 2023, a breach of any of the provisions of the Nigeria Data Protection Act, 2023 and Nigeria Data Protection Regulation 2019 constitute an interference with the right to privacy?
And if the court resolves the above question in favour of the Applicant, he seeks the following consequential prayers:
1. A declaration that the Respondent’s notice requiring all controllers including the Applicant to register with the Respondent is likely to interfere with the Applicant’s right to privacy guaranteed by section 37 of the Constitution of the Federal Republic of Nigeria 1999
2. A declaration that by virtue of section 65 of the Nigeria Data Protection Act 2023, Law Firms do not qualify as data controllers or processors of major importance
3. A declaration that by virtue of section 5(d) and 44 of the Nigeria Data Protection Act 2023, the Respondent lacks the powers to register all controllers except the controllers and processors of major importance.
4. A declaration that by the combined provisions of sections 44 and 65 of the Nigeria Data Protection Act 2023, until the Respondent designates controllers and processors of major importance, it cannot exercise its powers of registration over all types of controllers and processors.
5. A declaration that the Respondent’s call for registration without prescription of controllers and processors of major importance is ultra vires.
6. Perpetual injunction restraining the Respondent from requiring the Applicant’s Law Firm to register under the Act.
7. Perpetual injunction restraining the Respondent from registering controllers and processors until it has issued notices designating controllers and processors of major importance.
The suit is yet to be assigned to a judge.