Did You Know That A Dcpmi Must File Its Data Protection Compliance Audiт Returns By 31 March Each Year?

The legal landscape in Nigeria pertaining to data privacy and protection is dynamic and ever-changing, influenced by a blend of sector specific regulations, recent laws, and constitutional provisions.

Nigeria's data protection landscape has fundamentally shifted with the enactment of the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive 2025. This article examines the legal architecture governing cross-border data transfers, identifies critical compliance obligations for international technology transactions, and demonstrates how well-structured data compliance can serve as a competitive advantage in one of Africa's most dynamic digital markets.

Nigeria's data privacy landscape is anchored by the Nigeria Data Protection Act, 2023 (the "NDPA"), administered by the Nigeria Data Protection Commission (the "NDPC").

In an increasingly digitized and globalized economy, the transfer of personal data across national borders has become an operational necessity for businesses. Nigerian companies and businesses...

On 20 March 2025, the Nigeria Data Protection Commission ("NDPC") released the General Application and Implementation Directive 2025 ("GAID").

The emergence of deepfakes has introduced a new challenge for Nigerian law as artificial intelligence (AI) now has the ability to misrepresent a person's identity through fabricated digital content that looks genuine. A notable example occurred on 27 May 2026, when an audio recording attributed to President Bola Ahmed Tinubu circulated online and was subsequently reported to have been AI-generated. T

Nigeria's Internet Code of Practice 2026 introduces a 48-hour breach notification requirement for Internet Access Service Providers, creating a shorter timeline than the Nigeria Data Protection Act 2023 and raising questions about overlapping regulatory obligations. This development reflects a broader global trend toward sector-specific cyber resilience requirements that demand earlier visibility into cyber incidents.

The issuance of the General Application and Implementation Directive (GAID) 2025 by the Nigeria Data Protection Commission (NDPC) is a significant milestone in the operationalisation of the Nigeria Data Protection Act...

Pursuant to Section 6(c) and 61-62 of the Nigeria Data Protection Act (NDPA), the Nigeria Data Protection Commission (NDPC) is empowered to create an implementation framework...

Nigeria’s technology sector has expanded rapidly over the past decade. If you run a fintech platform, e-commerce company, AI startup, or digital service in Nigeria...

Nigeria's Securities and Exchange Commission has introduced new capital adequacy rules for fund managers and private capital participants, establishing tiered minimum capital requirements based on assets under management. The guidelines clarify what constitutes qualifying capital, outline compliance pathways including cash injection and securities transfer, and set a June 2027 deadline for full implementation.

On 20 March 2025, the Nigeria Data Protection Commission ("NDPC") released the General Application and Implementation Directive 2025 ("GAID").

The Securities and Exchange Commission has issued Circular No. 26-1 dated 16th January 2026, revising the minimum capital requirements applicable to regulated capital market entities in Nigeria.

The Companies and Allied Matters Act Laws of the Federation of Nigeria 2004 was initially made law in Nigeria in 1990 as a decree of the military government.

On 31st March 2026, the Central Bank of Nigeria ("CBN") issued a press release announcing the commencement of an AML/CFT/CPF Supervision Pilot Scheme (the "Pilot Scheme") for a select group...

Nigeria's power sector experienced significant regulatory and industry developments in August 2026, including NERC's intervention in Kaduna Electricity Distribution Plc, the transfer of regulatory oversight to state commissions, and the launch of a Renewable Asset Management Company. These developments demonstrate the continuing implementation of Nigeria's decentralised electricity market framework and increased regulatory intervention in distressed distribution businesses.

Nigeria's tax landscape has transformed with the Nigeria Tax Act 2025 and Nigeria Tax Administration Act 2025, introducing a comprehensive framework for collective investment schemes. These reforms consolidate previously fragmented tax provisions, exempt dividends from authorised CISs, and create greater certainty for fund managers, trustees, and investors in Nigeria's capital markets.

In December 2020, the Central Bank of Nigeria (the "CBN") published a circular on the licence categorisations for operators in the Nigerian payments system (the "Circular").

The Investments and Securities Act 2025 ("ISA 2025") introduces a wide-ranging update to Nigeria's capital markets regulatory regime.

The Nigerian Exchange Group has unveiled plans to allow Nigerian companies with significant foreign exchange revenue and free trade zone enterprises to issue and list bonds and stocks denominated in US Dollars. This initiative aims to provide an avenue to meet the foreign exchange needs of such companies while enhancing investment opportunities in Nigerian capital markets.