The Lagos State Data Protection Bill passed, on 25 October 2021, the second reading by the Lagos State Assembly. OneTrust DataGuidance confirmed the development with Olumide Babalola Managing Partner at Olumide Babalola Legal Partners LP, who added that "The bill is now due for Committee stage which will invite the public for comments after which the Committee makes it report and the bill may go for a third reading culminating into its passage and then the Governor's assent which official makes it a law of Lagos State."

In particular, the bill would apply to data processing carried out by data controllers which are domiciled in the State of Lagos or not domiciled in the State but which make use of automated or non-automated means in the State, unless those means are used only to forward personal data through the State. The bill seeks to establish, among other things, legal bases and principles for the processing of personal data, as well as information duties for controllers, and data security requirements. In addition, the bill also seeks to establish the Lagos State Data Protection Commission, for which various enforcement powers are foreseen and whose approval would be necessary to make data transfers out of the State, subject to exceptions, including the data subject's express consent to such transfer.

You can read the bill here.