5 Countries with GDPR-like Data Privacy Laws

3. Nigeria

Average Score: 9

The Nigeria Data Protection Regulation (NDPR) was passed in November 2020 as an effort to ratify and implement the Malabo Convention of 2014. According to the NDPR, any African signatory of the Convention are considered as having adequate data protection laws. The NDPR replicates much of the provisions within the GDPR, including but not limited to extraterritoriality, defines obligations of data controllers and processors, and sets standards for personal data transfers. It only differs in one fundamental aspect: the NDPR doesn’t specify a minimum or maximum fine but lists extenuating factors taken into account when determining the amount of the fine.