Nigeria Data Protection Commission (NDPC) on Thursday unveiled the Nigeria Data Protection Act – General Application and Implementation Directive (NDP Act-GAID), 2025.
The directive is aimed at safeguarding the fundamental rights and freedoms of Nigerians in the context of data privacy and protection.
Speaking at a press conference in Abuja, Dr Vincent Olatunji, National Commissioner/CEO of NDPC, said the directive was a significant milestone in Nigeria’s quest to protect citizens’ data.
Olatunji explained that the directive addressed various critical areas, including data protection principles, lawful bases of data processing, and data subjects’ rights.
He added that the directive also emphasized the importance of safeguarding privacy rights in the context of emerging technologies like Artificial Intelligence.
The NDPC boss noted that the commission had introduced the data subjects’ Standard Notice to Address Grievance (SNAG), empowering Nigerians to demand remedial action from data controllers and processors.
Olatunji said the full implementation of the NDP Act would commence in September 2025, with provisions related to fees starting in January 2026.
He assured that the NDPC would provide guidance notices, carry out capacity-building programs, and collect feedback to inform future reviews and regulatory instruments.
Nigeria CommunicationsWeek reports that the NDP Act-GAID, 2025, is a regulatory instrument that gives effect to the noble objectives of the Nigeria Data Protection Act, 2023.
The act was signed into law by President Bola Tinubu on June 12, 2023, to guarantee the privacy of citizens, their homes, correspondence, telephone conversations, and telegraphic communications.