Regulations › Rest of world › Nigeria
NDPA (Nigeria)
Nigeria Data Protection Act, 2023
WhenSigned into law in June 2023
Who enforces itNigeria Data Protection Commission (NDPC)
Who it applies toData controllers and processors in Nigeria or processing the data of people in Nigeria.
Tell the regulatorNotify the Commission within 72 hours of becoming aware of a breach likely to risk individuals…
DPO requiredData controllers and processors of major importance must designate a DPO; low thresholds (over…
RegistrationControllers and processors of major importance must register, with fees of N10,000-250,000 by…
Transfers abroadTransfers need an adequate level of protection in the destination or a listed basis such as in…
Request deadlineNo fixed number of days
Maximum fineGreater of N10 million or 2% of prior-year annual gross revenue for entities of major importance
Data protection authority Nigeria Data Protection Commission (NDPC)
- Address
- 1919 Cadastral Zone C06, Mbora District, Life Camp, FCT Abuja✓
- info@ndpc.gov.ng ✓
- Phone
- +234 916 061 5551 ✓
- Website
- ndpc.gov.ng
- Breaches
- Report a breach
Checked 18 Oct 2026. ✓ confirmed on the authority's own site. Report a change
Local help in Nigeria
Law firms, training centers and other providers in Nigeria can apply to be listed here. We check each one before it shows.
List your organizationRegulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws