Key Regulatory Updates Under The 2025 General Application And Implementation Directive (GAID) Issued By The Nigeria Data Protection Commission (NDPC)

INTRODUCTION

The General Application and Implementation Directive (GAID) 2025 is a key regulatory instrument issued by the Nigeria Data Protection Commission (NDPC) on March 20, 2025, pursuant to its powers under the Nigeria Data Protection Act (NDPA), 2023. The GAID is scheduled to become operational on September 19, 2025, and is intended to guide the interpretation and implementation of the NDPA across both public and private sector data processing activities in Nigeria.

KEY UPDATES UNDER THE GAID 2025

Below are the most significant updates introduced by the General Application and Implementation Directive (GAID) 2025, which clarify and expand upon key provisions of the Nigeria Data Protection Act (NDPA), 2023.