Cybersecurity threats are increasing globally, and Nigerian companies are not exempt. From ransomware attacks on banks to data breaches in fintech and e-commerce, organizations need structured approaches to protect sensitive data. One of the most widely respected global standards is the NIST Cybersecurity Framework (NIST CSF). Developed by the U.S. National Institute of Standards and […]
The California Consumer Privacy Act (CCPA), effective January 2020, is one of the most influential data protection laws in the world. Designed to give California residents greater control over their personal information, the law imposes strict obligations on businesses operating in or targeting the California market. Even if your business is located outside the United […]
In today’s global digital economy, data is both a strategic resource and a liability. Nigerian companies across diverse sectors—ranging from financial services and telecommunications to healthcare, e-commerce, and oil and gas—are increasingly exposed to international data protection regulations. The European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Nigeria’s own […]
Welcome to the definitive, up-to-date guide on Nigeria’s NDPA Act 2025, incorporating the recently issued General Application & Implementation Directive (GAID) 2025. If you are a business, compliance officer, startup, law firm, or simply interested in data privacy, this article walks you through everything: scope, definitions, obligations, rights, compliance steps, and real-world examples. We aim […]
Why Definitions Matter Under the NDPA If you’re new to the Nigeria Data Protection Act (NDPA), one of the first hurdles is the legal jargon. Words like “data subject,” “controller,” and “processing” may sound abstract but they matter. Legal clarity: Compliance obligations depend on exact definitions. Roles & scope: Whether you’re a controller or processor […]
