Section 53, NDPA
Joint and vicarious liability
(1) Where an offence has been committed by a body corporate or firm, the body corporate or firm, as well as principal officers of the body corporate or firm shall be deemed culpable, unless the principal officers prove that —
(a) the offence was committed without their consent or connivance; and
(b) they exercised diligence to prevent the commission of the offence.
(2) A data controller and data processor shall be vicariously liable for the acts or omissions of its agent or employees in so far as the acts or omissions relate to its business.
This is Section 53 of the Nigeria Data Protection Act 2023. To explore the rest of the legislation, please use the links below:
- See the Full Act (Index)
- Next, Read Section 54: Limitation of suits against the Commission
- Back to Section 52: Forfeiture