GAID 2025 (effective 2025-09-19) retired NDPR; DCPMIs face annual Compliance Audit Returns via licensed DPCOs — define the instrument (NDPA + GAID) before the take on buyer/vendor risk.
The NDPC’s GAID 2025 (PDF primary; effective 19 Sep 2025) operationalizes the Nigeria Data Protection Act 2023 and replaced NDPR. Secondary legal analyses describe an annual Compliance Audit Return path for Data Controllers/Processors of Major Importance via licensed DPCOs. Brief readers need the instrument names and filing mechanics before vendor scare copy.
Sources:
NDPC — GAID 2025 (PDF)
IAPP — Operationalizing Nigeria’s Data Protection Act through the GAID