Skip to main content
FortressSphere
Back to frameworks

NDPA 2023 & GAID Self-Audit

A guided self-assessment against Nigeria's Data Protection Act 2023 and the NDPC's General Application and Implementation Directive (GAID) 2025, which took effect 19 September 2025 and now governs implementation alongside the Act. Built for SMEs with no in-house compliance team. Takes about 15-20 minutes.

Sections

9

Questions

48

Some appear only when an earlier answer makes them relevant

Start the self-audit

Your answers save as you go, so you can stop and come back. Nothing is scored until you review and submit.

What it covers (9)

  1. 1. Organisational Accountability & Registration11 questions
  2. 2. Data Mapping & Processing Purposes6 questions
  3. 3. Lawful Basis & Consent8 questions
  4. 4. Data Subject Rights & Grievance Mechanism4 questions
  5. 5. Data Protection Impact Assessments & Privacy by Design3 questions
  6. 6. Third-Party & Cross-Border Transfers4 questions
  7. 7. Security Measures6 questions
  8. 8. Breach Readiness & Incident Response4 questions
  9. 9. Retention & Disposal2 questions