Nigeria Data Protection Act 2023 (Nigeria)-NDPA

The Nigeria Data Protection Act 2023 (NDPA) is Nigeria’s comprehensive data protection legislation governing the collection, processing, storage, use, disclosure, and protection of personal data. The Act establishes obligations for data controllers and processors, provides individuals with rights over their personal information, regulates lawful processing, sensitive personal data, data security, breach notifications, and cross-border transfers. The NDPA replaces the previous Nigeria Data Protection Regulation (NDPR) framework and establishes the Nigeria Data Protection Commission (NDPC) as the primary regulatory authority responsible for enforcement and compliance.