Nigeria: Registration as a data controller or data processor of major importance requirement in Nigeria Data Protection Act 2023 General Application and Implementation Directive 2025 (NDPC/NDP ACT-GAID/01/2025)
Progress
Current status
in force
19 Sep 2025 in force
20 Mar 2025 adopted
Scope
Implementers
Nigeria
Policy Area
Authorisation, registration and licensing
Policy Instrument
Business registration requirement
Regulated Economic Activity
infrastructure provider: internet and telecom services
infrastructure provider: cloud computing, storage and databases
infrastructure provider: network hardware and equipment
infrastructure provider: other
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Data Protection Commission's General Application and Implementation Directive including registration as a data controller or data processor of major importance requirement (NDPC/NDP ACT-GAID/01/2025) enters into force
On 19 September 2025, the Nigeria Data Protection Commission’s (NDPC) General Application and Implementation Directive (GAID) 2025 (NDPC/NDP ACT-GAID/01/2025) under the Nigeria Data Protection Act (NDP Act) 2023 enters into force, mandating registra…
SourceEvent type
order
Action type
implementation
Government branch
executive
Government body
data protection authority
Data Protection Commission adopted General Application and Implementation Directive (NDPC/NDP ACT-GAID/01/2025) including registration as a data controller or data processor of major importance requirement
On 20 March 2025, the Nigeria Data Protection Commission (NDPC) adopted the Nigeria Data Protection Act (NDP Act) 2023 General Application and Implementation Directive (GAID) 2025 (NDPC/NDP ACT-GAID/01/2025), which mandates registration for data con…
SourceEvent type
order
Action type
adoption
Government branch
executive
Government body
data protection authority