Obligations beyond Nigeria.
WHY A NIGERIAN BUSINESS MIGHT BE CAUGHT
Foreign regimes frequently apply based on whose data is processed, not where the processor sits.
WHAT TYPICALLY TRIGGERS THE EUROPEAN REGIME
Offering goods or services to people in that region Monitoring their behaviour
WHAT DOES NOT TRIGGER IT
A website merely being accessible from there.
WHAT INDICATES TARGETING
Pricing in their currency Language aimed at that market Marketing directed there
WHAT IT REQUIRES IF IT APPLIES
The full set of obligations Possibly a representative in the region A transfer mechanism for data leaving it
WHAT OTHER REGIMES MATTER
Regional laws in various countries and states, with differing triggers and rights.
WHAT THEY HAVE IN COMMON
Transparency, rights, security and accountability.
WHAT DIFFERS
Thresholds Specific rights Notification timeframes Penalties
WHAT TO DO PRACTICALLY
Build to a high common standard.
WHY
Meeting the strictest regime that applies to you satisfies most others.
WHAT TO ESTABLISH
Which regimes actually apply.
HOW
Where your customers are, and what you do with their data.
WHAT TO AVOID
Assuming a foreign law does not apply because you are not established there.
WHAT TO DO
Take advice if you serve customers abroad.
