Nigeria: Data Protection Commission's General Application and Implementation Directive including cybersecurity regulation (NDPC/NDP ACT-GAID/01/2025) enters into force

Description

Data Protection Commission's General Application and Implementation Directive including cybersecurity regulation (NDPC/NDP ACT-GAID/01/2025) enters into force

On 19 September 2025, the Nigeria Data Protection Commission’s (NDPC) General Application and Implementation Directive (GAID) 2025 (NDPC/NDP ACT-GAID/01/2025) under the Nigeria Data Protection Act (NDP Act) 2023 enters into force. Article 28 and Sch…

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2025-03-20
adopted

On 20 March 2025, the Nigeria Data Protection Commission (NDPC) adopted the Nigeria Data Protection…

2025-09-19
in force

On 19 September 2025, the Nigeria Data Protection Commission’s (NDPC) General Application and Imple…