2.13.7 Where personal data are transferred to a foreign country or to an international
organisation, the Data Subject shall have the right to be informed of the appropriate
safeguards for data protection in the foreign country. The Data Subject shall have the
right to obtain from the Controller without undue delay the rectification of inaccurate
personal data concerning him or her. Considering the purposes of the processing, the
Data Subject shall have the right to have incomplete personal data completed, including
by means of providing a supplementary statement.
2.13.8 The Data Subject shall have the right to request the Controller the delete of
personal data without delay and the Controller shall delete personal data where one of
the following grounds applies:
a) the personal data are no longer necessary in relation to the purposes for
which they were collected or processed;
b) the Data Subject withdraws consent on which the processing is based;
c) the Data Subject objects to the processing and there are no overriding
legitimate grounds for the processing;
d) the personal data have been unlawfully processed; and
e) the personal data have to be erased for compliance with a legal obligation
in Nigeria.
2.13.9 The Controller who has made the personal data public and is obliged to delete
the personal data shall, take all reasonable steps, to inform Controllers processing the
personal data of the Data Subjects request.
2.13.10 The Data Subject shall have the right to obtain from the Controller restriction of
processing where one of the following applies:
a) the accuracy of the personal data is contested by the Data Subject for a
period enabling the Controller to verify the accuracy of the personal
data;
b)
the processing is unlawful and the Data Subject opposes the erasure of
the personal data and requests the restriction of their use instead;
c)
the Controller no longer needs the personal data for the purposes of the
processing but they are required by the Data Subject for the
establishment, exercise or defence of legal claims; and
d)
the Data Subject has objected to processing pending the verification
whether the legitimate grounds of the Controller override those of the
Data Subject.
16