Data, privacy and AI rules

Due in 60 days12Regulations190

12 due in 60 days · 190 regulations

Jurisdiction

Nigeria: data, AI and cyber laws

Part of Middle East and Africa.

Regulations

Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics
Amended
Nigeria NDPANigeria's primary data protection statute, establishing the NDPC, lawful bases, data subject rights, 72-hour breach notification, and special duties for data controllers and processors of major importance (registration, DPO, compliance audits). The GAID 2025 supersedes the NDPR 2019 and its Implementation Framework with detailed rules on audits, DPIAs, transfers and more.In effect since Jun 12, 2023

Past deadlines

Takes effectSep 19, 2025 · 13 months ago · Source
GAID 2025 takes effectGeneral Application and Implementation Directive becomes effective, replacing the NDPR 2019 and NDPR Implementation Framework.
MilestoneJun 12, 2023 · 3.4 years ago · Source
NDPA signed into lawPresident signs the Nigeria Data Protection Act, 2023.