Overview
The Nigeria Data Protection Regulation (NDPR) 2019 is Nigeria's foundational data protection regulation, issued by the National Information Technology Development Agency (NITDA) to regulate the processing of personal data and protect individuals' privacy rights. The regulation establishes principles for lawful data processing, consent management, data security, third-party processing, cross-border data transfers, and the rights of data subjects. Its objectives include safeguarding personal data, promoting secure data-driven transactions, preventing misuse of personal information, and supporting Nigeria's participation in the global digital economy through internationally aligned privacy standards. The NDPR applies to organizations that process the personal data of Nigerian citizens and residents and provides compliance, enforcement, and audit requirements designed to ensure accountability and responsible data handling practices.