Nigeria · Privacy & Data Protection
The country's own data-protection regime, registration duties, and its official supervisory authority.
AI-drafted, editorial review pending. The official links below are checked — confirm specifics with the authority.
The Nigeria Data Protection Act 2023 is enforced by the Nigeria Data Protection Commission, and the Commission's General Application and Implementation Directive (GAID) has applied in full since 19 September 2025. Processing needs a lawful basis, data subjects have access, rectification and erasure rights, and transfers abroad need adequate protection or another permitted ground. Controllers and processors of major importance register with the Commission, and personal data breaches likely to put people at risk must be notified to it within 72 hours. The National Assembly began a review of the Act in 2026.
- The NDPC's GAID has applied in full since 19 September 2025.
- Breaches likely to put people at risk are notified to the NDPC within 72 hours.
- Controllers and processors of major importance register with the Commission.
- Nigeria Data Protection Commission (NDPC)
Nigeria Data Protection Commission: registration, breach notifications and enforcement.
Government portals
- Corporate Affairs Commission (CAC) — Company registration, annual returns and company searches.
- Nigeria Revenue Service (NRS) — Federal taxes, including company income tax, VAT and the development levy.
- Nigeria Immigration Service eVisa — Online short-visit visa applications, which replaced visas on arrival in 2025.
- Nigeria Data Protection Commission (NDPC) — Data protection registration, guidance and breach notification.