Nigeria Data Protection Regulation 2019 / NDPA 2023 Framework

The NDPR 2019 was issued by NITDA as subsidiary legislation under the NITDA Act. It was superseded by the Nigeria Data Protection Act of 14 June 2023, which established the Nigeria Data Protection Commission as the statutory regulator. The Act is broadly modelled on the EU GDPR; the NDPC has issued five compliance directives and three significant enforcement actions against major banks and telecoms as at 2024.