Binding law — in force
Solely automated decisions with legal or similar significant effects need human intervention, the person's view and a way to contest (Nigeria NDPA s. 37)
Nigeria's Data Protection Act, 2023 gives a data subject the right not to be subject to a decision based solely on automated processing of personal data, including profiling, that produces legal or similar significant effects concerning them (s. 37(1)), except where the decision is necessary for a contract between the data subject and the controller, authorised by a written law with suitable safeguards, or authorised by the data subject's consent (s. 37(2)). The data controller must implement suitable measures to safeguard the data subject's rights, including the rights to obtain human intervention, to express their point of view and to contest the decision (s. 37(3)). Before collecting personal data, the controller must tell the data subject of the existence of automated decision-making, including profiling, its significance and envisaged consequences, and the right to object to and challenge it (s. 27(1)(g)). Detect a model output that becomes a decision about a person with no human-intervention and contest route, and no human decision.
ng-ndpa-s37.automated-decision-safeguards · Official Gazette No. 119, Vol. 110, Lagos, 1st July, 2023 (masthead) · official source · jurisdictions: NG