Privacy & Data
Data Protection in Nigerian Practice
Ngozi Eze·2026-08-01·5 min
The NDPA reshaped the obligations of every business that touches personal data. A practical map.
The Nigeria Data Protection Act moved compliance from aspiration to obligation. Every entity processing personal data now carries duties that were once the concern of only the largest firms.
The core duties
Lawful basis, purpose specification, data minimisation and accountability are no longer optional principles. They are the architecture of every lawful processing operation.
Practical first steps
Map your data. You cannot protect what you have not inventoried. A data inventory is the foundation document of compliance — and, increasingly, the first thing a regulator asks to see.
Privacy is not a policy. It is a practice.