Overview
IntroductionThe data protection and privacy landscape in Nigeria has evolved rapidly in recent years. With the enactment of the Nigeria Data Protection Act 2023 (NDPA) and the subsequent issuance of the General Application and Implementation Directive (GAID) 2025, organisations are now operating under a much stronger regulatory framework. In addition, Nigerians are becoming increasingly aware of their privacy rights and are willing to challenge how their personal data is handled. Furthermore, the Nigerian Data Protection Commission (NDPC) has demonstrated a readiness to wield the “big stick," as seen in high-profile actions against entities such as MultiChoice and Meta, resulting in significant fines for various breaches of their data protection obligations. In light of this, data controllers and processors can no longer afford to treat data as a mere box-ticking exercise. This Guide therefore provides readers with a bird’s-eye view of key issues and serves as a practical, hand-holding companion to Nigeria’s data privacy framework. Request the full insight below.
