Unveiling The Nigeria Data Protection Act, 2023: An Expert Appraisal Of Key Provisions
A notable provision of the Act is the inclusion of legitimate interest as a basis for processing personal data.[5] Legitimate interest comes up in an instance where an organisation needs to process personal data in order to discharge responsibilities related to the business that may not necessarily be justified by a legal or contractual obligation but such processing of personal data can be justified on grounds of legitimate interest. This implies that data controllers and processors can justify the processing on grounds of legitimate interest. e.g. data processing for the prevention of fraud, and employee-employer relationships.