The Nigeria Data Protection Commission (NDPC) has taken a significant step toward bolstering data privacy in the country with the release of the Nigeria Data Protection Act General Application and Implementation Directive (NDP Act GAID, 2025). This initiative establishes a comprehensive framework to ensure compliance with the Nigeria Data Protection Act, 2023, which was enacted on June 12, 2023, by President Bola Ahmed Tinubu.
During a news briefing in Abuja, Dr. Vincent Olatunji, the National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission, emphasized that this directive aligns with Section 37 of the Nigerian Constitution, which guarantees citizens' privacy regarding their personal data.
Dr. Olatunji highlighted the NDPC's proactive engagement with various stakeholders, including corporate bodies, civil society organizations, international institutions, and the media, to develop robust data protection measures across Nigeria.
A key feature of the new directive is the introduction of the Standard Notice to Address Grievance (SNAG), an innovative mechanism that empowers Nigerians to demand data protection compliance directly from data controllers and processors without needing to involve the Commission initially. With over 230 million Nigerians actively participating in data protection, this initiative signifies a shift toward democratized enforcement of privacy rights.
"The NDP Act GAID, 2025 sets clear guidelines on data protection principles, lawful processing of data, cross-border data transfers, privacy impact assessments, data ethics, artificial intelligence (AI), and accountability frameworks for businesses and institutions," Dr. Olatunji stated. "The directive further introduces a standardized grievance redress mechanism, ensuring individuals and organizations can effectively resolve data privacy disputes."
Full implementation of the directive is scheduled for September 2025, with fee-related provisions set to take effect in January 2026. The Commission has assured Nigerians that it will launch guidance notices, advisories, and capacity-building programs to facilitate compliance.
Dr. Olatunji reaffirmed that by holding data controllers and processors accountable, the NDPC aims to foster trust, enhance Nigeria's digital economy, and safeguard personal data amidst the rapid evolution of technological advancements.
No comments