Africa · Nigeria

Nigeria Data Protection Act (NDPA) 2023

Nigeria's comprehensive privacy law, enforced by the Nigeria Data Protection Commission (NDPC).

Quick facts

Code: NDPA-NG
Jurisdiction: Nigeria
Region: Africa
Enforcement:
Penalties up to Ôéª10M or 2% of annual gross revenue for major data controllers
Official source

The NDPA 2023 replaces the NDPR. We deliver registration, DPCO selection, compliance audits and data-subject-rights programmes for organisations operating in the largest African economy.

Key principles & obligations

Lawfulness

Purpose limitation

Data minimisation

Accuracy

Storage limitation

Integrity & confidentiality

Accountability

Related frameworks.

South Africa

Protection of Personal Information Act (POPIA)

South Africa's comprehensive privacy law, enforced by the Information Regulator.

Read summary

Kenya

Kenya Data Protection Act, 2019

Kenya's flagship data protection statute, enforced by the Office of the Data Protection Commissioner (ODPC).

Read summary

Kenya

Kenya Computer Misuse and Cybercrimes Act, 2018

Criminalises cyber-offences and gives effect to investigation, prosecution and international cooperation on cybercrime in Kenya.

Read summary