⁦NDPA / GAID⁩

⁦Nigeria⁩ الخصوصية

الحالة

⁦NDPA in force (assented 13 June 2023). GAID issued 20 March 2025, effective 19 September 2025; it replaces the NDPR 2019 and its 2020 Implementation Framework.⁩✓المصادر: ⁦ndpc.gov.ng⁩, ⁦dlapiperdataprotection.com⁩, ⁦aelex.com⁩, ⁦banwo-ighodalo.com⁩

على من ينطبق

⁦Controllers and processors domiciled, resident or operating in Nigeria. Under the GAID,⁩ '⁦operating in Nigeria⁩' ⁦includes targeting Nigerian data subjects without a local presence (extraterritorial).⁩✓المصادر: ⁦ncc.gov.ng⁩, ⁦ndpc.gov.ng⁩, ⁦dlapiperdataprotection.com⁩

حدود الحجم

'⁦Major importance⁩' ⁦(must register): more than 200 data subjects in 6 months, or set sectors regardless of volume (finance, health, insurance, e-commerce, etc.). Tiers:⁩ >⁦200,⁩ >⁦1,000,⁩ >⁦5,000 subjects.⁩✓المصادر: ⁦ndpc.gov.ng⁩, ⁦dlapiperdataprotection.com⁩

الجهة الرقابية

⁦Nigeria Data Protection Commission (NDPC)⁩✓المصادر: ⁦ncc.gov.ng⁩, ⁦dlapiperdataprotection.com⁩

الإبلاغ عن الخروقات أو الحوادث

⁦Notify the NDPC within 72 hours of becoming aware of a breach likely to risk individuals⁩' ⁦rights; notify affected people immediately if high risk.⁩✓المصادر: ⁦ncc.gov.ng⁩, ⁦ndpc.gov.ng⁩, ⁦dlapiperdataprotection.com⁩

مهلة الرد على طلبات البيانات الشخصية

⁦No fixed response deadline in the NDPA or GAID; requests must be handled without unreasonable delay, and erasure without undue delay.⁩✓المصادر: ⁦ncc.gov.ng⁩, ⁦ndpc.gov.ng⁩, ⁦banwo-ighodalo.com⁩

مسؤول حماية البيانات

⁦Mandatory for data controllers/processors of major importance; may be an employee or contractor. GAID adds DPO credential assessment and certification.⁩✓المصادر: ⁦ncc.gov.ng⁩, ⁦ndpc.gov.ng⁩, ⁦aelex.com⁩

الممثل المحلي

⁦No local representative requirement in the NDPA or GAID; foreign entities targeting people in Nigeria are treated as⁩ '⁦operating in Nigeria⁩'.✓المصادر: ⁦ncc.gov.ng⁩, ⁦ndpc.gov.ng⁩, ⁦dlapiperdataprotection.com⁩

نقل البيانات إلى الخارج

⁦Allowed to NDPC-assessed adequate jurisdictions, or using a Cross-Border Data Transfer Instrument, or exceptions (explicit consent, contract, legal claims).⁩✓المصادر: ⁦ncc.gov.ng⁩, ⁦dlapiperdataprotection.com⁩

ملفات تعريف الارتباط والموافقة

⁦Consent is one of six lawful bases; it must be affirmative, informed and withdrawable (silence or pre-ticked boxes are not consent). Under the GAID, non-essential cookies need consent through a conspicuous banner seen without scrolling, and privacy and cookie notices must be on the homepage.⁩✓المصادر: ⁦ncc.gov.ng⁩, ⁦ndpc.gov.ng⁩, ⁦dlapiperdataprotection.com⁩

أقصى عقوبة

⁦Major importance: greater of 2% of prior-year gross revenue or NGN 10 million. Others: greater of 2% or NGN 2 million.⁩✓المصادر: ⁦ncc.gov.ng⁩, ⁦dlapiperdataprotection.com⁩

المعلومات الموسومة بعبارة «قيد التحقق» لا تزال قيد التأكيد ولا تُقدَّم كإجابات.

ما يجب عليك فعله✓

• ⁦Count data subjects over 6 months to see if you are of major importance; register in the right tier.⁩
• ⁦Pay the registration fee (NGN 10,000 / 100,000 / 250,000 by tier).⁩
• ⁦File your annual Compliance Audit Return by 31 March if you are in the Extra-High or Ultra-High tier.⁩
• ⁦Appoint a certified DPO if you are of major importance.⁩
• ⁦Report breaches to the NDPC within 72 hours.⁩
• ⁦Use a DPIA and meet GAID pre-deployment checks before using AI, IoT or blockchain.⁩
• ⁦Record a legitimate-interest assessment before relying on that basis.⁩

التغييرات الأخيرة

⁦GAID issued 20 March 2025, effective 19 Sept 2025: revised CAR filing fees and a 31 March deadline, DPO credential assessment, a standard DPIA template, cookie-consent and emerging-tech rules, and an explicit extraterritorial targeting test. Registration tiers come from the NDPC⁩'⁦s February 2024 guidance notice.⁩✓

المصادر

• المصدر الأساسي: ⁦https://ndpc.gov.ng/⁩
• المصدر الثاني: ⁦https://www.dlapiperdataprotection.com/index.html?t=law⁩&⁦c=NG⁩
• الجهة الرقابية: ⁦Nigeria Data Protection Commission (NDPC)⁩

✓ = مؤكَّد من مصدرين مستقلين، أحدهما على الأقل رسمي. كيف نتحقق

معلومات فقط، وليست استشارة قانونية. القوانين تتغير؛ تحقّق مع الجهة الرقابية أو محامٍ مؤهل قبل الاعتماد على هذه الصفحة. هل لاحظت خطأ؟ راسلنا على ⁦contact@⁩⁦glancedeskjurisdiction.com⁩.