d)
The Data Subject has objected to processing, pending the verification
whether the legitimate grounds of the Controller override those of the
Data Subject.
(12) Where processing has been restricted such Personal Data shall, except for
storage, only be processed with the Data Subject's consent or for the
establishment, exercise or defence of legal claims or for the protection of the rights
of another natural or legal person or for reasons of important public interest in
Nigeria.
(13) The Controller shall communicate any rectification or erasure of Personal Data or
restriction to each recipient to whom the Personal Data have been disclosed,
unless this proves impossible or involves disproportionate effort. The controller
shall inform the Data Subject about those recipients if the Data Subject requests it.
(14) The Data Subject shall have the right to receive the Personal Data concerning him
or her, which he or she has provided to a controller, in a structured, commonly
used and machine-readable format, and have the right to transmit those data to
another controller without hindrance from the controller to which the Personal Data
have been provided, where:
(a) The processing is based on consent, or
(b) On a contract, and
(c) The processing is carried out by automated means.
(15)
In exercising his right to Data Portability, the Data Subject shall have the right to
have the Personal Data transmitted directly from one controller to another, where
technically feasible. Provided that this right shall not apply to processing
necessary for the performance of a task carried out in the public interest or in the
exercise of official authority vested in the Controller.
(16) The exercise of the foregoing rights shall be in conformity with constitutionally
guaranteed principles of law for the general protection and enforcement of
fundamental rights.
PART FOUR:
4.1 IMPLEMENTATION MECHANISMS
17
NIGERIA DATA PROTECTION REGULATION