nigeria-ndpr

name	nigeria-ndpr
description	Nigeria Data Protection Regulation (NDPR) and Nigeria Data Protection Act (NDPA) 2023 compliance. Covers lawful basis for processing, data subject rights, cross-border transfer mechanisms, Data Protection Compliance Organisation (DPCO) registration, mandatory DPIA filing, and breach notification. Keywords: NDPR, NDPA, Nigeria, NITDA, DPCO, Africa data protection, cross-border transfer.
license	Apache-2.0
metadata	{"author":"mukul975","version":"1.0","domain":"privacy","subdomain":"global-privacy-regulations","tags":"ndpr, ndpa, nigeria, nitda, dpco, africa-data-protection"}

Nigeria Data Protection Regulation (NDPR) and Nigeria Data Protection Act (NDPA)

Overview

Nigeria's data protection framework comprises the Nigeria Data Protection Regulation (NDPR) issued by NITDA in January 2019, and the Nigeria Data Protection Act (NDPA) signed into law on June 12, 2023. The NDPA established the Nigeria Data Protection Commission (NDPC) as an independent regulatory body, replacing NITDA's oversight role. The NDPA applies to the processing of personal data by any data controller or processor that is domiciled, resident, or operating in Nigeria, or that processes personal data of data subjects in Nigeria.

Lawful Basis for Processing (NDPA Section 25)

Lawful Basis	Description
Consent	Data subject has given consent to the processing for one or more specific purposes. Must be freely given, specific, informed, and unambiguous.