A member appointed to the Council under Section 08 of this Act from—

(a) the private sector shall be a Nigerian and possess not less than five years cognate experience and proficiency in data protection and privacy; and

(b) government, under Section 08(1)(c) of this Act, may have proficiency in data protection and privacy.