The Nigeria Data Protection Commission (NDPC) has introduced the Nigeria Data Protection Act – General Application and Implementation Directive (NDP Act GAID) to enhance understanding and compliance with the Nigeria Data Protection Act (NDP Act). The directive serves as a guide for individuals and organizations covered under the Act, ensuring adherence to data protection principles and legal frameworks.
Speaking at the unveiling press conference, the National Commissioner/CEO of NDPC, Dr. Vincent Olatunji, lauded the committee responsible for developing the directive. The committee, comprising stakeholders from various sectors, played a crucial role in shaping the document. Dr. Olatunji highlighted that the NDP Act GAID provides technical and organizational measures on key areas such as data protection principles, lawful basis for data processing, compliance audits, and data subject rights. Additionally, he noted that the directive incorporates guidelines for handling emerging technologies.
Dr. Olatunji emphasized that data subjects are not required to be physically present at the Commission to seek redress for privacy breaches. He explained that the NDPC has democratized the privacy breach remediation process through the introduction of the Data Subjects’ Standard Notice to Address Grievance (SNAG). This initiative allows data subjects to directly request remedial actions from data controllers and processors without first lodging a complaint with the Commission.
The introduction of the NDP Act GAID is expected to provide clarity on the NDP Act’s provisions, enabling data controllers and processors to fulfill their obligations while empowering data subjects with a clear understanding of their rights.
