xvii.

“Foreign Country” means other sovereign states, autonomous or semiautonomous territories within the international community;

xviii.

“Regulation” means this Regulation and its subsequent amendments, and
where circumstance requires it shall also mean any other Regulations on the
processing of information relating to identifiable individual’s, including the
obtaining, holding, use or disclosure of such information to protect such
information from inappropriate access, use, or disclosure;

xix.

“Personal Data” means any information relating to an identified or identifiable
natural person (‘Data Subject’); an identifiable natural person is one who can
be identified, directly or indirectly, in particular by reference to an identifier
such as a name, an identification number, location data, an online identifier
or to one or more factors specific to the physical, physiological, genetic,
mental, economic, cultural or social identity of that natural person; It can be
anything from a name, address, a photo, an email address, bank details,
posts on social networking websites, medical information, and other unique
identifier such as but not limited to MAC address, IP address, IMEI number,
IMSI number, SIM, Personal Identifiable Information (PII) and others;

xx.

“Personal Identifiable Information (PII)” means information that can be used
on its own or with other information to identify, contact, or locate a single
person, or to identify an individual in a context

xxi.

“Processing” means any operation or set of operations which is performed on
Personal Data or on sets of Personal Data, whether or not by automated
means, such as collection, recording, organisation, structuring, storage,
adaptation

or

alteration,

retrieval,

consultation,

use,

disclosure

by

transmission, dissemination or otherwise making available, alignment or
combination, restriction, erasure or destruction;
xxii.

“Personal Data Breach” means a breach of security leading to the accidental
or unlawful destruction, loss, alteration, unauthorised disclosure of, or access
to, Personal Data transmitted, stored or otherwise processed;

xxiii.

“Recipient” means a natural or legal person, public authority who accepts
data;
6
NIGERIA DATA PROTECTION REGULATION

Select target paragraph3