The Nigeria Data Protection Commission (NDPC) has issued the General Application and Implementation Directive (GAID), effective 19th September 2025, a landmark step in clarifying compliance under the Data Protection Act 2023. From registration and audits to breach notifications and privacy…
Sep 18, 2025
TMT Team
The Nigeria Data Protection Commission (NDPC) has issued the General Application and Implementation Directive (GAID), effective 19th September 2025, a landmark step in clarifying compliance under the Data Protection Act 2023.
From registration and audits to breach notifications and privacy notices, the GAID sets out a unified framework for data controllers and data processors to follow, with heightened obligations for those of “major importance.”
Its message is clear: data protection is no longer a one-time task but a continuous obligation. Organisations must embed compliance into daily operations, ensuring transparency, accountability, and global best practice in handling personal data.
