There is established the Nigeria Data Protection Commission (in this Act, referred to as “the Commission”).

The Commission — (a) shall be a body corporate, with perpetual succession and a common seal; (b) may sue or be sued in its corporate name; and (c) may acquire, hold and dispose of its property.

The Commission — (a) shall have its head office in the Federal Capital Territory; and (b) may maintain other offices, in any part of Nigeria, for the purposes of achieving the objects of the Commission.

Subject to the approval of the Council, the National Commissioner may acquire other offices and premises for the use of the Commission.