What is the NDPA DSAR deadline?

Under Nigeria Data Protection Act, 2023 (NDPA), the standard response deadline is 30 days. The counting method is calendar days, starting from the day of receipt.

Can I extend a NDPA deadline?

Yes. An extension of 30 days is available when: Complex or voluminous requests requiring additional processing time. You must notify the data subject within: Within the original 30-day deadline.

🇳🇬NDPA

Nigeria — NDPA DSAR Deadline Calculator

Q: Who enforces NDPA?

NDPA is enforced by Nigeria Data Protection Commission (NDPC). Maximum penalties: Up to NGN 10M or 2% of annual gross revenue (whichever is higher) for data controllers of major importance.

Calculate your exact response deadline under Nigeria Data Protection Act, 2023 (NDPA).

Configure your DSAR

Select jurisdiction, request type, and date — results update instantly.

Jurisdiction

Your deadline will appear here

Select a jurisdiction and request type to get started

NDPA Overview

Full Name

Nigeria Data Protection Act, 2023

Effective Since

2023-06-14

Regulatory Authority

Nigeria Data Protection Commission (NDPC)

Official Text

View law

Maximum Penalties

Up to NGN 10M or 2% of annual gross revenue (whichever is higher) for data controllers of major importance

Request Types & Deadlines

Request Type	Deadline	Extension
Right of Access Sec. 34 — Right to request access to personal data	30 days	+30 days
Right to Rectification Sec. 34 — Right to request rectification of inaccurate data	30 days	+30 days
Right to Erasure Sec. 34 — Right to request erasure of personal data	30 days	+30 days
Right to Object Sec. 34 — Right to object to processing of personal data	30 days	+30 days
Right to Portability Sec. 34 — Right to data portability in a structured format	30 days	+30 days

Extension Rules

Extension period: 30 days

Conditions: Complex or voluminous requests requiring additional processing time

Notification required: Within the original 30-day deadline

Special Rules & Common Mistakes

•Must respond within 30 calendar days of receiving the request
•Extension of up to 30 additional calendar days for complex requests
•Replaces the earlier NDPR (Nigeria Data Protection Regulation 2019)
•NDPC established as an independent regulatory body
•Mandatory data protection impact assessments for high-risk processing
•Cross-border data transfer requires adequacy determination or appropriate safeguards

Compare with Other Jurisdictions

Law	Deadline	Method	Extension
🇳🇬 Nigeria NDPA	30 days	calendar days	+30 days
🇪🇺 EU GDPR	1 months	calendar months	+2 months
🇬🇧 UK GDPR	1 months	calendar months	+2 months
🇺🇸 CCPA	45 days	calendar days	+45 days