NATIONAL DATA PROTECTION ACT (NDPA)

What Is This Policy?

The Nigeria tax act creates the Nigeria Data Protection Commission, and provides Nigeria with a modern legal framework for privacy and digital trust.

Who Does It Target?

The act is targets Individuals (data subjects) to protect their rights, Organizations (controllers & processors) to regulate how they handle data, and the NDPC as the enforcement authority.

What Does It Aim to Achieve?

It aims to protect privacy rights, regulate personal data processing, and to empower individuals with enforceable rights

Key Features

Legal Framework for Data Protection: Provides binding legislation for the protection of personal information in Nigeria. Obligations of Data Controllers & Processors: Required to implement accountability measures, security safeguards, and compliance programs. Scope & Application: Applies to both public and private sector entities that process personal data in Nigeria.

Current Status

Rollout Stage: active in its implementation stage Coverage: applies nationwide Beneficiaries to Date: Individuals (Data Subjects), Organizations, Government Institutions Funding: Federal Government Allocations

How to Access

Nigeria Data Protection Commission (NDPC) The NDPC hosts the official text of the Act on its website. You can download the full Nigeria Data Protection Act, 2023 directly from their resources section. Official Gazette The Act was published in Nigeria’s Federal Government Gazette after being signed into law in June 2023. Copies can be obtained from the Government Printer in Abuja or Lagos.

Important Terms

Term 1-Data Subject: Any individual whose personal data is being collected, processed, or stored. The Act protects their rights. Term 2- Personal Data: Any information relating to an identified or identifiable person (e.g., name, ID number, email, biometrics).

Official Resources

Nigeria Data Protection Commission (NDPC) The NDPC hosts the official text of the NDPA 2023 on its website. You can download the full Act directly from their resources section. Policy and Legal Advocacy Centre (PLAC) Provides the explanatory memorandum and a structured breakdown of the Act’s sections. Useful for understanding the objectives, application, and institutional framework. KPMG Nigeria Publishes professional commentary and analysis of the NDPA, including its arrangement of sections and compliance implications.

Legal Framework

The Nigeria Data Protection Act (NDPA) 2023 is the primary legislation governing data privacy and protection in Nigeria. It establishes the Nigeria Data Protection Commission (NDPC) and operates under the constitutional right to privacy (Section 37, 1999 Constitution). The Act aligns with the African Union Convention on Cyber Security and Personal Data Protection, ECOWAS Supplementary Act on Personal Data Protection, and international standards from the EU General Data Protection Regulation (GDPR) which informed its framework.