Federal High Court Fixes July 2 for Hearing in Emeka Ike’s N10bn Suit

Nollywood actor and politician, Emeka Ike, has initiated a N10 billion fundamental rights enforcement suit against Lere Olayinka, the Senior Special Assistant on Public Communications and Social Media to the Minister of the Federal Capital Territory (FCT), over an alleged data breach involving data from the Independent National Electoral Commission (INEC). The Federal High Court in Abuja has scheduled July 2 for further mention of the case. This high-value claim underscores the increasing judicial scrutiny on data privacy violations in Nigeria, particularly in the wake of the Nigeria Data Protection Act, 2023 (NDPA). The suit highlights the interplay between constitutional rights to privacy, statutory data protection obligations, and the accountability of individuals, including public officials, in handling sensitive personal information.

The landscape of data privacy and protection in Nigeria is rapidly evolving, marked by a growing awareness of individual rights and a more robust regulatory framework. A significant development in this regard is the N10 billion fundamental rights enforcement suit filed by Nollywood actor and politician, Emeka Ike, against Lere Olayinka, an aide to the Minister of the Federal Capital Territory, concerning an alleged breach of INEC data. This case, currently before the Federal High Court in Abuja, with a hearing fixed for July 2, signals a critical juncture in Nigeria's data protection jurisprudence, particularly as it involves a public official and sensitive electoral data.

Nigeria's journey towards comprehensive data protection legislation has seen significant milestones. Prior to the current regime, data privacy was primarily safeguarded by Section 37 of the Constitution of the Federal Republic of Nigeria, 1999 (as amended), which guarantees the privacy of citizens, their homes, correspondence, telephone conversations, and telegraphic communications. This constitutional provision served as the bedrock for privacy claims, albeit in a more general sense. In 2019, the National Information Technology Development Agency (NITDA) issued the Nigeria Data Protection Regulation (NDPR), which provided a more specific framework for data processing, mirroring concepts from the European Union's General Data Protection Regulation (GDPR). The NDPR introduced obligations for data controllers and processors, as well as rights for data subjects, and prescribed penalties for breaches.

The Emeka Ike suit is poised to test the robustness of Nigeria's data protection framework, particularly the Nigeria Data Protection Act, 2023 (NDPA), which received presidential assent on June 12, 2023, replacing the NDPR. The NDPA establishes the Nigeria Data Protection Commission (NDPC) as the primary regulatory authority and aims to safeguard the fundamental rights and freedoms of data subjects. The claim for N10 billion highlights the potential for significant damages in data breach cases, reflecting the NDPA's provisions for remedies and recourse for data subjects. Recent judicial pronouncements, such as the Lagos State High Court's decision in *Bonje v Guaranty Trust Bank Plc* (2025), have affirmed that a breach of data subject rights under the NDPA constitutes a breach of the constitutional right to privacy guaranteed by Section 37 of the 1999 Constitution. This precedent provides a strong legal basis for pursuing data breach claims through fundamental rights enforcement actions, as Emeka Ike has done. The Fundamental Rights (Enforcement Procedure) Rules, 2009 (FREPR), govern the procedural aspects of such applications, allowing aggrieved persons to seek redress in the High Court where the infringement occurs or is likely to occur. The Federal High Court has concurrent jurisdiction with State High Courts in fundamental rights matters, particularly when the subject matter falls within its exclusive jurisdiction under Section 251(1) of the Constitution or involves a Federal Government Agency like INEC. The Independent National Electoral Commission (INEC) is mandated to organize elections and manage a vast database of voter information, making its data handling practices critical for public trust and democratic integrity. The alleged breach of INEC data, therefore, raises serious questions about the security measures in place and the accountability of individuals who access or process such sensitive information. The fact that the suit is against Lere Olayinka, an aide to a public official, could bring into focus the extent of personal liability for data breaches committed in an official or quasi-official capacity, and whether such actions could be attributed to the state or require a separate action against the public body. While the NDPA outlines various compliance obligations for data controllers and processors, including implementing appropriate technical and organizational measures to protect personal data, the specific allegations against Olayinka will determine the scope of liability. Previous cases, such as *MTN Nigeria Communications Ltd v Barr. Godfrey Eneye* (2013) and *Ezugwu Anene v Airtel Nigeria Ltd.*, have seen damages awarded for unauthorized disclosure of personal data, demonstrating the courts' willingness to grant remedies for privacy infringements. The NDPC has also shown active enforcement, imposing significant fines on firms for data breaches in 2024. This case will likely delve into whether Olayinka acted as a data controller or processor, or if his actions constituted an unauthorized disclosure or misuse of personal data, thereby violating Emeka Ike's fundamental right to privacy and the provisions of the NDPA.

The N10 billion fundamental rights enforcement suit by Emeka Ike against Lere Olayinka represents a landmark case in Nigeria's burgeoning data protection landscape. It underscores the judiciary's increasing role in upholding data privacy rights and holding individuals, including those in public service, accountable for breaches. For legal practitioners, this case highlights the critical importance of understanding the Nigeria Data Protection Act, 2023, the Fundamental Rights (Enforcement Procedure) Rules, 2009, and the evolving jurisprudence on the constitutional right to privacy. The substantial damages sought serve as a stark reminder of the financial and reputational risks associated with data privacy violations. Practitioners should advise clients, particularly those handling sensitive personal data or operating in public capacities, to implement robust data protection policies, ensure strict compliance with the NDPA, and conduct regular data protection impact assessments. The outcome of this case will undoubtedly shape future litigation and enforcement trends, further solidifying data protection as a critical area of legal practice in Nigeria.