Nigeria: Data Protection Commission's General Application and Implementation Directive including data protection authority governance (NDPC/NDP ACT-GAID/01/2025) enters into force

On 19 September 2025, the Nigeria Data Protection Commission’s (NDPC) General Application and Implementation Directive (GAID) 2025 (NDPC/NDP ACT-GAID/01/2025) under the Nigeria Data Protection Act (NDP Act) 2023 enters into force, defining the NDPC’s regulatory powers. The directive outlines the Commission’s responsibilities, including issuing guidelines, conducting compliance audits, and enforcing penalties under Sections 5, 6, and 62 of the NDP Act. It also establishes procedures for cooperation with public authorities and sectoral regulators under Article 4 of the GAID.