Expertise
The Nigerian Data Protection Commission (NDPC) has released the Nigerian Data Protection Act General Application and Implementation Directive (NDP ACT-GAID) to further safeguard fundamental rights in data privacy and protection. Speaking at the announcement during a news conference in Abuja, NDPC’s National Commissioner/CEO, Dr. Vincent Olatunji, outlined the directive’s focus on technical and organizational measures, covering key areas such as
The Nigerian Data Protection Commission (NDPC) has released the Nigerian Data Protection Act General Application and Implementation Directive (NDP ACT-GAID) to further safeguard fundamental rights in data privacy and protection.
Speaking at the announcement during a news conference in Abuja, NDPC’s National Commissioner/CEO, Dr. Vincent Olatunji, outlined the directive’s focus on technical and organizational measures, covering key areas such as:
Data Protection Principles
Lawful Bases for Data Processing
Data Subjects’ Rights
Data Ethics & Emerging Technologies
Compliance Audits & Impact Assessments
Cross-Border Data Transfers
Training & Certification of Data Protection Officers
Grievance Redress Mechanisms and Alternative Dispute Resolution
A notable feature of the NDP ACT-GAID is its approach to emerging technologies like Artificial Intelligence, requiring practitioners to implement privacy by design and by default. Additionally, the NDPC has introduced the Standard Notice to Address Grievance (SNAG), allowing data subjects to seek redress directly from data controllers without first approaching the Commission.
The Commissioner stressed the importance of holding data controllers accountable to build trust and ensure lawful data use for sustainable development. He reaffirmed the NDPC’s commitment to an open-door policy that balances individual rights with economic growth. The Commission will also issue guidance notices, advisories, and capacity-building programs to deepen the culture of data privacy and protection across Nigeria.
The Commissioner also stated that the full implementation of the NDP ACT-GAID will begin in September 2025, following a six-month transition period. Additionally, all provisions related to fees will take effect in January 2026.
Stay tuned, as JEE will soon publish an in-depth review of the NDP ACT-GAID, analyzing its implications for businesses, data controllers, and individuals.
Contact – dataprotection@jee.africa
Important Notice: The information contained in this Article is intended for general information purposes only and does not create a lawyer-client relationship. It is not intended as legal advice from Jackson, Etti, & Edu (JEE) or the individual author(s), nor intended as a substitute for legal advice on any specific subject matter. Detailed legal counsel should be sought prior to undertaking any legal matter. The information contained in this Article is current to the last update and may change. Last Update: October 1, 2024.
