Data Protection Audit Report Filing Alert for 2026

The General Application and Implementation Directive 2025 (“GAID”), issued further to the Nigerian Data Protection Act 2023 (“NDPA”), mandates all data controllers and data processors of major importance to file their Compliance Audit Returns (“CAR”), through a licensed Data Protection Compliance Organisation (DPCO), with the Nigerian Data Protection Commission (the “Commission”) not later than March 31 of each year, in this case March 31, 2026.