The Effortless Lawyer

27/04/2026

Become a Certified DPO

25/03/2026

06/03/2026

📢 ATTENTION BUSINESS OWNERS! 📢
Is your business fully compliant? The deadline for filing your Annual Returns is approaching!
✅ Who: LLCs, Business Names, and Incorporated Trustees.
📅 Deadline: June 30th.
Avoid penalties and keep your business records active. 🚀
Reach out to to get started today! ⚖️

06/03/2026

Data Protection/Privacy
Your Right to Object: 🇳🇬 Nigeria vs. 🇬🇧 UK

Scenario: Imagine a local gym in either Lagos or London has your old phone number and keeps sending you marketing texts even after you've asked them to stop. Which of the rights listed above would be your "strongest" tool to make them stop specifically for marketing?

In both Nigeria and the UK, individual rights are the "heart" of data privacy laws. These rights empower you to control how organizations use your personal information. Since both the NDPA and UK GDPR share a common ancestor in European law, their lists of rights look very similar, but the way you exercise them can differ.

Here is a breakdown of the core rights you have in both countries:
Core Data Subject Rights.

1. Right to be Informed: Organizations must tell you clearly who they are and why they are collecting your data.
2. Right of Access: You can request a copy of the personal data an organization holds about you (often called a Subject Access Request or SAR).
3. Right to Rectification: You have the right to insist that inaccurate or incomplete data be corrected.
4.Right to Erasure: Also known as the "Right to be Forgotten," you can ask for your data to be deleted under certain conditions.
4. Right to Object: You can say "no" to your data being used for specific purposes, like direct marketing.
5. Right to Data Portability: You can ask for your data in a format that lets you easily move it to another service provider.

I will be waiting for your answer in the comment section.


# NDPA

15/01/2026

Big Tech vs. Nigerian Law: What the Falana v. Meta Judgment Means for You.

The Lagos High Court just delivered a landmark ruling that every data controller and digital marketer in Nigeria needs to pay attention to.
Human rights lawyer Femi Falana (SAN) sued

Meta Platforms Inc. after a page used a deepfake video of him to sell health products. On January 13, 2026, the court ruled in his favor, awarding $25,000 in damages.
As a data privacy expert, I see three critical shifts in this judgment that redefine the "Duty of Care" in our digital economy:

1. The End of "Just an Intermediary"
Meta argued they were just hosting the content. The Court disagreed. Because Meta monetizes the content and uses algorithms to decide who sees it, they were ruled a Joint Data Controller.
👉 Lesson: If you profit from the data, you are responsible for its integrity.

2. Accuracy is a Statutory Requirement
The court found Meta in breach of Section 24 of the Nigeria Data Protection Act (NDPA). By allowing a deepfake to circulate, Meta was "processing inaccurate data."
👉 Lesson: Data accuracy isn't just a best practice; it's a legal mandate.

3. Health Data is "Sensitive" (Even for Public Figures)
The ruling clarified that being a public figure does not strip you of your right to privacy regarding sensitive health information.
👉 Lesson: Heightened protection applies to health, biometric, and genetic data, regardless of status.

The Takeaway:
This isn't just a win for Femi Falana; it’s a win for Data Sovereignty in Nigeria. It proves that the NDPA 2023 has teeth and that global tech giants must respect local privacy standards.

Is your organization’s data strategy ready for this level of accountability? Let’s discuss in the comments. ⬇️

13/01/2026

Stop believing that you can’t hold hospitals accountable in Nigeria. Here are the facts." No one is above the law. Section 33 of the Constitution protects your Right to Life.