Section 2: Application

(1) This Act shall apply to the processing of personal data, whether by automated means or not.
(2) This Act shall apply, where the –
(a) data controller or data processor is domiciled in, resident in, or operating in Nigeria;
(b) processing of personal data occurs within Nigeria; or
(c) the data controller the data processor is not domiciled in, resident in, or operating in Nigeria, but is processing personal data of a data subject in Nigeria.