Data Protection in Nigeria: Privacy Law, Rights and Compliance
A practical course for Nigerian organisations and their suppliers: the Nigeria Data Protection Act, 2023, the GAID 2025, the Nigeria Data Protection Commission, registration of major-importance organisations, lawful processing, rights requests, breaches, processors and transfers, with 2026 examples.
Enrol in this Course
- 📦 5 modules
- 📹 20 lessons
- 📝 5 quizzes
- 🎓 Certificate on completion
- ♾ Learn at your own pace, online
Every organisation in Nigeria handles personal data about customers, employees, patients, pupils or members of the public. This course explains Nigeria’s data protection law in practical terms for the organisations that decide how data is used (data controllers) and the suppliers that handle it for them (data processors), such as payroll bureaus, IT and cloud providers and contact centres.
It covers the Nigeria Data Protection Act, 2023, the Nigeria Data Protection Commission’s General Application and Implementation Directive (GAID), 2025, and related laws, with practical Nigerian examples. The focus is on principles that do not change: a lawful basis before processing, transparency, minimisation, security by design, accountability with evidence, and the rights of the people the data is about.
Fines, fees, deadlines and other figures are shown as 2026 examples and are expected to change. All of them are collected in a dated reference table at the end of the course. Always confirm any figure with the Nigeria Data Protection Commission or a qualified adviser before you act.
What you will learn
- How the Act, the GAID and the Nigeria Data Protection Commission fit together
- Who must register as a data controller or processor of major importance, and the audit return and accountability duties
- The principles, lawful bases and consent, sensitive and children’s data, notices and direct marketing
- How to handle rights requests, run impact assessments and govern data protection
- How to secure data, respond to breaches, manage processors and transfer data abroad lawfully
- How to handle employee data, CCTV, cookies and AI tools, and how complaints, enforcement and penalties work
Who it is for
Compliance officers and Data Protection Officers, HR, IT and security staff, marketing and customer-service staff, managers and business owners, and suppliers that process personal data for clients.
How the course works
There are five modules, each with four lessons and a short quiz. You need 70% on each quiz to complete the course and earn your certificate.
Course Curriculum
5 modules · 20 lessons · 5 quizzes · 1 free preview
Module 1: Foundations of Data Protection
- 1.1 How Data Protection Works in Nigeria (Start Here) Free preview
- 1.2 The Legal Framework and the Regulator
- 1.3 Key Concepts: Personal Data, Sensitive Data, Controllers and Processors
- 1.4 Registration and Accountability Duties
-
Module 1 Quiz Enrol to take
Module 2: Processing Personal Data Lawfully
- 2.1 The Data Protection Principles (Start Here)
- 2.2 Lawful Bases and Consent
- 2.3 Sensitive Data, Children's Data and Biometrics
- 2.4 Privacy Notices and Direct Marketing
-
Module 2 Quiz Enrol to take
Module 3: Rights and Governance
- 3.1 Data Subject Rights (Start Here)
- 3.2 Handling Rights Requests
- 3.3 The Data Protection Officer and Governance
- 3.4 Impact Assessments and Privacy by Design
-
Module 3 Quiz Enrol to take
Module 4: Security, Breaches and Transfers
- 4.1 Security Safeguards (Start Here)
- 4.2 Personal Data Breaches
- 4.3 Processors, Vendors and Contracts
- 4.4 Cross-Border Transfers and Data Localisation
-
Module 4 Quiz Enrol to take
Module 5: Data Protection in Practice
- 5.1 Employee Data and Workplace Monitoring (Start Here)
- 5.2 CCTV, Websites, Cookies and AI Tools
- 5.3 Complaints, Enforcement and Penalties
- 5.4 Building a Compliance Programme and Calendar
-
Module 5 Quiz Enrol to take