The Nigeria Data Protection Commission issued guidance for the registration requirements for data controllers and processors with "particular value or significance to the economy, society or security of Nigeria" under the Data Protection Act. The requirements apply to any controller or processor handling the personal data of more than 200 data subjects every six months or processing personal data in key sectors, including financial, health care, education and energy. Editor's note: IAPP Staff Writer Alex LaCasse explored AccessNow's findings on the state of implementation of data protection laws across Africa.