Nigerian financial sector compliance directory — Acts, Regulations, Guidelines and Circulars from PenCom, CBN, NAICOM, SEC and NDPC.
Sets continuous professional development (CPD) requirements for Data Protection Officers (DPOs). Date reflects site upload and matches an NDPC social media post on the same notice …
Extends the deadline for filing 2025 Compliance Audit Returns from 31 March 2026 to 30 May 2026. The 2026 audit season carries stricter oversight; penalties for non-compliance of u…
Directs that Compliance Audit Returns will serve as the benchmark for assessing responsible AI use: major-importance entities must demonstrate through audit submissions that AI-dri…
Comprehensive implementing framework for the NDPA. Repeals the NDPR 2019; mandates registration of major-importance entities, compliance audits within 15 months of commencing proce…
Classifies regulated entities (Ultra-High, Extra-High and other levels) by volume and sensitivity of data processed, and sets registration obligations with the Commission for those…
Circular addressing data protection compliance obligations specific to public sector bodies. Date is an approximate placeholder - undated on NDPC's own site; worth verifying agains…
Principal data protection legislation establishing the NDPC, lawful bases for processing, data subject rights, registration of data controllers/processors of major importance, brea…
Guidance on filing 2022 Data Protection Compliance Audit Returns (CAR) under the then-applicable NDPR 2019, ahead of a new CAR filing cycle under the NDP Act. Listed on NDPC's site…
Code of conduct governing licensed Data Protection Compliance Organizations (DPCOs): objectives, principles, registration, compliance services, responsibilities to data subjects/th…
NITDA-issued operational guidance under the NDPR: audit filing procedures, DPCO licensing, breach handling and compliance expectations. Rendered obsolete alongside the NDPR upon th…
Sets standards for how public institutions in Nigeria collect, process, store and share personal data, implementing the NDPR 2019 specifically for the public sector.
Nigeria's first broad data protection instrument, issued by NITDA. Superseded — ceased to apply as a regulatory instrument upon issuance of the GAID 2025, though actions taken unde…
This vault is a monitoring aid, not legal advice; always confirm against the regulator's official publication.
