The table below summarizes, section by section, how this policy addresses each applicable legal framework. It is a navigation aid, not a substitute for the fuller discussion in Section 4 and throughout the policy.
Law / instrument
Core requirement
Addressed in
NDPA 2023
Lawful basis, data subject rights, breach notification, DPO/registration, security, accountability
Sections 5, 6, 8, 9, 14, 15, 18, 19
NDPA 2023 — cross-border transfer rules
Adequate protection required before transferring data outside Nigeria
Section 12
NDPC General Application and Implementation Directive (GAID) 2025
Registration and Compliance Audit Return thresholds; implementation detail for the Act
Section 4.2, Section 6.2
Constitution of Nigeria 1999, s.37
Constitutional right to privacy
Section 4.3
Child Rights Act 2003
Best interests of the child; parental consent
Sections 4.4, 9.2, 9.5, 16
CAMA 2020, Part F (Incorporated Trustees)
NGO governance, annual returns, audited accounts
Sections 4.5, 13
Money Laundering (Prevention and Prohibition) Act 2022 / SCUML
DNFI registration and reporting obligations for NGOs
Sections 4.6, 8, 11.4, 13
Freedom of Information Act 2011 (sector norms)
Transparency expectations for donor/public reporting
Section 4.7
GDPR / CCPA (voluntary good-practice alignment)
Purpose limitation, minimization, rights, breach notice — followed voluntarily for diaspora-donor trust
Section 4.8