The NDPR was issued by the National Information Technology Development Agency (NITDA) on 25 January 2019. The NDPR provides a comprehensive set of rules governing data protection in Nigeria, many of which are GDPR-compatible.
In November 2020, NITDA issued the NDPR implementation framework, which provided further detail and interpretation of the rules set out by the NDPR.
Over the past four years, capacity building and awareness raising, both resulting in compliance efforts by local and foreign data controllers have been significant. In addition, Nigeria has quickly become one of the most active African countries with respect to enforcement, by proactively auditing domestic organisations as well as foreign technology giants with no local presence.
