For Nigerian employers, compliance in 2026 is not simply a matter of updating an employee handbook.

Recent developments affect how businesses handle employee data, workplace safety, payroll records, tax deductions and the systems used to support each of them.

Some of these developments are court decisions. Others are official government or regulatory guidance. They do not all have the same legal effect, and they should not be treated as though they do.

What they have in common is practical significance.

Here are four developments employers should understand — and what HR, payroll and leadership teams should be reviewing in response.

1. The Federal High Court has upheld the NDPC’s power to require DCPMI registration

On 17 July 2026, the Federal High Court in Lagos delivered judgment in Emmanuel Haruna v Nigeria Data Protection Commission, upholding the Nigeria Data Protection Commission’s statutory authority to designate and register Data Controllers and Processors of Major Importance, or DCPMIs.

The case did not create a new data-protection law. The registration framework comes from the Nigeria Data Protection Act 2023 and the NDPC’s implementation instruments. The significance of the judgment is that the court rejected the argument that the Commission lacked statutory authority to operate that framework in the circumstances before it.

Under the NDPC’s current Guidance Notice, now contained in Schedule 7 of the General Application and Implementation Directive 2025, an organisation may fall within the DCPMI framework where, among other criteria, it processes the personal data of more than 200 data subjects within six months. The framework also captures specified categories of processing that the Commission considers significant to Nigeria’s economy, society or security.

For employers, this matters because personal-data processing is not limited to customer databases.

Employee records, applicant information, payroll data, guarantor details, medical information, disciplinary records, attendance information and contractor records are all forms of personal data. Depending on the organisation’s activities and the applicable DCPMI criteria, those processing activities may be relevant when assessing the organisation’s obligations.

What employers should do

Do not assume that data protection belongs only to IT or Legal.

HR should be able to answer some basic questions:

  • What categories of employee and applicant data do we hold?
  • Approximately how many individuals’ data do we process?
  • Who has access to it?
  • Which third-party processors receive it?
  • Do our employment documents and privacy notices explain that processing properly?
  • Have we assessed whether DCPMI registration or other enhanced obligations apply?

The NDPC’s current framework also contains operational requirements concerning registration, compliance audit returns and Data Protection Officers, depending on the category into which the organisation falls.

There is, however, an important legal nuance.

In Frank Ijege v NDPC, decided in 2024, another division of the Federal High Court invalidated a number of provisions in an earlier version of the NDPC Guidance Notice as exceeding the scope of the Act. The NDPC subsequently revised the notice, and the updated version now appears in the GAID 2025. The later Haruna judgment strengthens the Commission’s underlying registration authority, but employers should be careful not to read it as meaning that every conceivable classification is automatically beyond challenge.

The practical response is not panic. It is a documented assessment.

2. A ₦20 million workplace-injury judgment is a reminder that safety failures can become employment liabilities

On 29 July 2026, the National Industrial Court delivered judgment in John Edeh v Dingshengyuan Plastic Processing and Manufacturing Company Ltd.

Mr Edeh, a machine operator, permanently lost three fingers following an industrial accident. The court found the employer grossly negligent for failing to provide safe machinery, a safe system of work and adequate protective equipment. The court’s official summary also records findings concerning inadequate training and the unsafe operation of the machinery involved.

The awards included ₦20 million in general damages for the permanent disability, pain, loss of amenities and psychological trauma; ₦504,500 in pharmaceutical expenses; ₦41,000 representing one month’s salary in lieu of notice; and ₦500,000 in costs. The court ordered payment within 30 days, after which the judgment sum would attract interest at 10% per annum.

The court described the employer’s duty to provide safe machinery, a safe system of work and protective equipment as a personal and non-delegable duty of care.

That is the part employers should pay attention to.

Workplace safety is not simply an operations issue. It is also a people-management, documentation and governance issue.

A company may have a safety policy on paper and still have serious exposure if:

  • machine guards or safety components are removed;
  • employees are placed on equipment they were not adequately trained to operate;
  • PPE is unavailable or issuance is undocumented;
  • accidents are handled informally;
  • medical assistance is delayed;
  • incident records are poor;
  • managers pressure injured employees into hurried settlements.

The court also rejected the argument that an earlier ₦500,000 payment released the employer from liability, accepting evidence that the payment had been made while the injured worker was in pain and under pressure.

There is one important limitation: the employer did not defend the proceedings, so the claimant’s evidence was unchallenged. The decision should therefore not be interpreted as establishing an automatic ₦20 million compensation figure for every workplace injury. Each case turns on its facts.

The broader lesson is clearer: safety systems have to exist in practice, not merely in policy.

3. The Federal Government has clarified how employers should separate pre-2026 and post-2026 tax periods

On 18 June 2026, the Federal Ministry of Finance issued its General Guidelines for the Implementation of the Tax Acts 2025.

These are implementation and transition guidelines, not another tax Act.

Their purpose is to explain how taxpayers and revenue authorities should move from the repealed tax framework into the new regime. The Ministry confirmed that the Nigeria Tax Act 2025 applies from 1 January 2026, while liabilities, assessments, audits, investigations, disputes and enforcement matters relating to earlier periods generally remain governed by the law applicable to those periods.

For HR and payroll teams, that creates an important operational distinction.

A 2025 payroll issue and a 2026 payroll issue may sit under different legal frameworks, even if both are being reviewed in 2026.

That matters particularly where an employer is:

  • responding to a tax audit;
  • correcting historic payroll records;
  • reconciling outstanding PAYE;
  • reviewing an assessment;
  • resolving a query that crosses the transition period;
  • changing payroll software or tax tables.

Employers should therefore avoid treating their payroll archive as one continuous set of rules.

A cleaner approach is to separate periods before 1 January 2026, reviewed using the legislation that applied at the time, from 1 January 2026 onward, administered under the new tax framework together with the relevant implementation guidance.

This is particularly important for record keeping. If an employer cannot establish which rules, rates and methodology were applied to a particular payroll period, correcting an error or defending a historic position becomes unnecessarily difficult.

4. The 2026 Personal Income Tax Guidelines change more than the PAYE rate table

The Joint Revenue Board’s Personal Income Tax Guidelines, 2026, dated 24 February 2026, provide employers with a much more detailed administrative framework for implementing personal income tax under the new tax regime.

The Guidelines address employer registration, PAYE deductions, records, employee deductions and reliefs, benefits-in-kind, annual returns and non-periodic employment payments.

For employers, several provisions are immediately practical.

PAYE deducted from employees is to be remitted to the relevant tax authority not later than the 10th day of the following month, while the employer’s annual return of employee emoluments is due not later than 31 January in respect of the preceding year.

The Guidelines also require payroll records to capture cumulative employee information, including gross emoluments, eligible deductions, taxable emoluments and tax.

They clarify the treatment of eligible deductions such as qualifying pension contributions, National Housing Fund contributions, health-insurance contributions, qualifying mortgage interest and life-insurance premiums, subject to the relevant conditions and supporting evidence.

One of the more visible changes is rent relief. An eligible individual may claim relief equal to 20% of annual rent paid, capped at ₦500,000, subject to prescribed information and evidence.

The Guidelines also address benefits-in-kind and non-periodic employee payments such as bonuses, overtime, commissions and severance payments. Compensation for loss of employment is treated as exempt up to ₦50 million, with the excess subject to the applicable tax treatment described in the Guidelines.

This means the 2026 payroll change is not simply an instruction to update the tax rates. It may require changes to payroll fields, employee-document collection, benefit valuation, rent-relief evidence, termination-payment workflows, year-to-date calculations and audit trails.

That is a systems issue as much as a tax issue.

What employers should review now

The common thread across these four developments is that compliance increasingly depends on operating systems, not isolated documents.

A policy cannot compensate for poor workplace-safety practice.

A privacy notice cannot replace an assessment of how employee data is actually processed.

A payroll spreadsheet cannot solve a tax-transition problem if the underlying methodology is unclear.

And an HR manual cannot protect a business if managers do not know how to apply it.

For employers, a sensible 2026 review should therefore cover four areas: employee-data governance, workplace safety records and training, separation of pre-2026 and post-2026 payroll records, and whether payroll systems now capture the information required under the new personal-income-tax framework.

The objective is not to create more paperwork. It is to make sure the business can show what it does, why it does it and which rules it relied on.

These developments should not all be described as new laws.

The NDPC and workplace-safety developments discussed above are court judgments. The Federal Ministry of Finance transition document and the Joint Revenue Board Personal Income Tax Guidelines are official administrative guidance supporting implementation of legislation already enacted.

That distinction matters.

A court judgment may clarify how existing law operates. Administrative guidance may explain how government bodies intend to administer legislation. Neither should automatically be described as though Parliament enacted a new statutory obligation on the date it was published.

For organisation-specific decisions — particularly litigation, tax interpretation or contested regulatory obligations — employers should obtain appropriately qualified legal or tax advice.

The FormWork perspective

Good HR infrastructure makes compliance easier because obligations are converted into repeatable processes: who collects information, what is recorded, when something is reviewed, who approves it and what evidence is retained.

If your business has grown but its HR and people systems have developed in pieces, an HR Review can help identify what exists, what is missing and what should be addressed first.

Related service

HR Review

Sources

The judgment in Emmanuel Haruna v Nigeria Data Protection Commission is unreported at the time of writing. The account above is based on secondary case analysis rather than a published court judgment.

General information note: This article provides general HR information and is not legal, tax or other specialist advice. Employers should obtain appropriately qualified advice on their own circumstances.