The GAID takes effect: Nigeria's operating manual for the NDPA

The NDPC's General Application and Implementation Directive 2025 (GAID), issued 20 March 2025 and effective 19 September 2025, is the instrument that turned the Nigeria Data Protection Act 2023 into day-to-day compliance obligations: registration, lawful bases, data subject rights, cross-border transfer rules and enforcement mechanics. It sets a materially higher bar than the NITDA-era framework it replaced. Every enforcement action the NDPC has taken since, the Temu investigation included, runs on GAID rails.