Data Protection and Privacy Knowledge Management Series

Access the Compiled OTL Law & Nexa Advisory Data Protection and Privacy Series

In 2025, OTL Law, in collaboration with Nexa Advisory, published a 12-part Data Protection and Privacy Knowledge Management Series. This Series was developed in response to the growing need for clear, practical, and locally relevant guidance on data protection compliance within Nigeria’s rapidly evolving digital ecosystem.

We are pleased to share that, in line with our commitment, the compiled version of the Series is now available and can be accessed at Data Protection Series.

Published between September and November 2025, the Series was designed to educate, elevate, and influence privacy practice across sectors. It reflects a fresh approach to data protection knowledge management, blending Nexa Advisory’s expertise in privacy compliance with OTL Law’s legal advisory experience.

Series Overview

• Article 1: What Is Personal Data?
• Article 2: Users of Personal Data: Data Controllers vs Data Processors
• Article 3: Understanding the Core Principles of Data Processing
• Article 4: Lawful Data Processing: Legal Bases for Processing Data
• Article 5: Data Protection Impact Assessments
• Article 6: A Deep Dive into the NDPA-GAID 2025
• Article 7: Cross-Border Data Transfers
• Article 8: Comparative Data Protection Practices Across Africa
• Article 9: Data Breaches and Your Organisation’s Response Plan
• Article 10: Building a Privacy Programme for Startups and SMES
• Article 11: Data Subject Rights
• Article 12: Data Protection in the Fintech and Healthtech Sectors

We hope this resource proves useful to legal practitioners, compliance professionals, founders, DPOs, and organisations navigating data protection obligations in Nigeria and across Africa. We welcome you to read, apply, and share it within your networks.