The Nigeria Data Protection Commission (NDPC) has intensified enforcement under the Nigeria Data Protection Act (NDPA) and the General Application & Implementation Directive (GAID).
Hospitality businesses—especially hotels, short-let apartments, guest houses, and serviced apartments—are now on the high-priority list due to the high volume of sensitive guest data they process daily.
GAID (General Application & Implementation Directive) is the NDPC’s enforcement framework under the NDPA.
It requires all hospitality businesses to demonstrate continuous, verifiable data protection compliance.
Hotels and short-let operators must show evidence of:
• Regular privacy audits
• Secure handling of guest data
• CCTV & access control compliance
• Staff training and awareness
• Documented data protection policies
• Strong breach-response processes
Compliance is ongoing—not a one-time requirement.
Hotels and hospitality operators process highly sensitive data including:
• Guest ID cards & passports
• Payment information
• Booking histories
• Biometrics for access control
• CCTV footage
• Staff HR files
This makes hospitality one of the most exposed sectors under the NDPA.
Penalties for Non-Compliance: 2% of Annual Revenue or ₦10M Minimum
₦40m annual revenue
₦10m fine
₦100m annual revenue
₦10m fine
₦500m annual revenue
₦20m fine
₦2bn annual revenue
₦40m–₦100m
Recent NDPC enforcement actions include penalties of ₦555.8m (2024) and ₦766.2m (2025)
- Annual privacy audit & continuous monitoring
- Data Protection Officer (internal/external)
- Guest data security (IDs, passports, bookings)
- Approved privacy & data protection policies
- Secure CCTV storage & access logs
- Staff training on data handling
- Third-party vendor compliance (POS, booking platforms)
- Retention & deletion processes for guest data
Failure to demonstrate compliance may lead to NDPC enforcement action.
Complete GAID audit in 5 days
Continuous data protection monitoring
Staff training for front desk & ops teams
All required policies & documentation
NDPA compliance certificate
12 months advisory and support
Free NDPA Readiness Assessment — Today Only
Our compliance specialist will assess your facility and outline your next steps.
Speak with our agent to schedule your assessment