New NDPC Directive on International Data Transfers

The Nigeria Data Protection Commission (NDPC) has released the General Application and Implementation Directive (GAID) 2025 to guide the implementation of the Nigeria Data Protection Act (NDPA) 2023. This directive focuses on international data transfers, clarifying that data controllers must ensure adequate protection or use approved mechanisms like binding corporate rules before transferring personal data outside Nigeria. It also establishes procedural expectations for maintaining records of transfer mechanisms and responding to NDPC compliance requests.