2.13.10 Where processing has been restricted such personal data shall, with the
exception of storage, only be processed with the Data Subject's consent or for the
establishment, exercise or defence of legal claims or for the protection of the rights of
another natural or legal person or for reasons of important public interest in Nigeria.
2.13.11 The Controller shall communicate any rectification or erasure of personal data
or restriction to each recipient to whom the personal data have been disclosed, unless
this proves impossible or involves disproportionate effort. The controller shall inform the
Data Subject about those recipients if the Data Subject requests it.
2.13.12 The data subject shall have the right to receive the personal data concerning
him or her, which he or she has provided to a controller, in a structured, commonly used
and machine-readable format and have the right to transmit those data to another
controller without hindrance from the controller to which the personal data have been
provided, where:
(a) the processing is based on consent, or
(b) on a contract, and
(c) the processing is carried out by automated means.
2.13.14 In exercising his right to data portability, the data subject shall have the right to
have the personal data transmitted directly from one controller to another, where
technically feasible.
Provided that this right shall not apply to processing necessary for the performance of a
task carried out in the public interest or in the exercise of official authority vested in the
controller.
2.13.15 The exercise of the foregoing rights shall be in conformity with constitutionally
guaranteed principles of law for the general protection and enforcement of fundamental
rights.
17