Data Protection Obligations of Private Employers and Employee Privacy Rights in Lagos

The increasing collection and processing of employee personal data by private sector employers in Lagos raises critical questions about the balance between employer operational interests and employee privacy rights under Nigeria's emerging data protection framework. This study examines the data protection obligations of private employers and the corresponding privacy rights of employees in Lagos under the Nigeria Data Protection Act 2023 and the regulations issued by the Nigeria Data Protection Commission. Using a practitioner-focused research design, the study surveys 80 human resource managers, 50 data protection officers, and 30 employment lawyers in Lagos's commercial districts, supplemented by doctrinal analysis of applicable law. Findings reveal that many Lagos-based employers collect disproportionate employee data, fail to maintain privacy notices, and process data for secondary purposes without employee consent, in breach of the Data Protection Act's lawful basis requirements. The study further examines emerging challenges in employee monitoring, including the use of digital surveillance tools, GPS tracking, and workplace email monitoring. Comparative analysis with the European Union's General Data Protection Regulation and South African POPIA framework informs the reform discussion. Recommendations include mandatory data privacy training for human resource professionals, clear statutory guidance on lawful employee data processing, and enhanced enforcement powers for the Nigeria Data Protection Commission in the employment context. Keywords: data protection, employee privacy, Nigeria Data Protection Act, Lagos, private employers