Back to policies
Federal Government of Nigeria

Nigeria Data Protection Act (NDPA) 2023

Governs how personal data is collected, processed, and protected across digital services, superseding the 2019 NDPR.

View original policy

Why it matters

The NDPA 2023 establishes Nigeria's comprehensive data protection regime. ren.ng services embed privacy-by-design controls, ensuring federated identity, learning analytics, and citizen science data comply with accountability, lawful processing, and data subject rights.

Implementation notes

  • Essential for eduID.ng attribute release policies and consent management.
  • Guides repository anonymisation practices and community data ethics.
  • Requires appointment of Data Protection Officers (DPOs) for ren.ng service adopters.

Next steps