Your Business Must Provide a Privacy Policy That Is Transparent and Easy for People to Understand Under The NDPA

The Nigeria Data Protection Commission (NDPC) has released the General Application and Implementation Directive (GAID) 2025 to guide the implementation of the Nigeria Data Protection Act (NDPA) 2023. This directive focuses on international data transfers, clarifying that data controllers must ensure adequate protection or use approved mechanisms like binding corporate rules before transferring personal data outside Nigeria. It also establishes procedural expectations for maintaining records of transfer mechanisms and responding to NDPC compliance requests.