The Nigeria Data Protection Regulation became effective in January 2019. The new regulation is considered a subsidiary law, governing the control and processing of data for natural persons. Therefore, Nigerian companies are now required to comply with data protection and privacy rules (where they are in possession of individual data) as this is a legal requirement of the regulation.