Salient Provisions of the Nigeria Data Protection Act General Application and Implementation Directive, 2025

Beulah Lekwauwa
James Amende

Introduction

On March 20, 2025, the Nigeria Data Protection Commission (the “Commission”) issued the Nigeria Data protection Act General Application and Implementation Directive (the “GAID”). The GAID seeks to provide certainty in legal obligations, particularly when the rights and freedoms of natural persons may be at risk, in the absence of such certainties. It also seeks to advance the fundamental rights and freedoms of natural persons. Importantly, the GAID has added to the body of legal instruments guiding data protection and privacy in Nigeria. In this article, we shall highlight some of the salient provisions of the GAID.