It is generally assumed by some cloud customers in Nigeria that since they do not provide the cloud service, they have no compliance obligation if the cloud service is used to process the personal data of individuals in Nigeria. But as will be explained below, this is incorrect and not always the case according to the provision of the Nigerian Data Protection Regulations 2019 (NDPR) issued by the National Information Technology Development Agency (NITDA).