Data Protection Compliance

Data Controllers, Data Administrators/Processors, Private and Public organisations in Nigeria who process personal data have statutory obligations under the Nigeria Data Protection Act (NDPA) 2023.

At DataPro, we are uniquely qualified to guide your organisation successfully through compliance with NDPA 2023, as we are the only licensed Data Protection Compliance Organisation (DPCO) with a comprehensive and extensive background in compliance consulting. We are also an Accredited Training Organisation (ATO) certified by the Institute of Information Management (IIM) Africa for the IIM Certified Data Protection Officer (CDPO) Certification Program.

Value Proposition

Financial Safety

Avoiding penalty for non-compliance and payment of fines.

Regulatory Compliance

Safeguarding the rights of natural persons (Individuals) (Data Elements) to data privacy (Data Protection and Privacy is now a fundamental human right) in Nigeria.

Consumer Protection

Fostering safe conduct of transactions involving the exchange of personal data by customers/clients of both public and private organizations in Nigeria (Consumer Protection is a major pillar of government legislation).

Accountability

Preventing the manipulation of personal data ( To stop the illegal use of personal data for political, marketing and sales purposes without the consent of the Data Subjects).

Standardization

Ensuring that Nigerian businesses and government agencies remain competitive in international trade (Global Competitiveness).

Sustainability

Ensuring the sustainability of businesses in Nigeria through safe and sound practices that will protect their reputation and increase customer confidence (Customer Confidence).

NDPR Mandatory Implementation Tasks

POLICY

All public and private organisations in Nigeria that control data of natural persons also known as Data controllers are required in accordance with the Nigerian Data Protection Act (NDPA) 2023 to avail the public with its comprehensive Data Protection & Privacy policy. Our team is experienced in providing tailor-made templates for our clients.

TRAINING

The NDPA (2023) stipulates that every Data Controller or Processor shall ensure continuous capacity building for its Data Protection Officer and the generality of its personnel involved in any form of data processing. DataPro offers a Data Protection Awareness training program virtually to sensitise all staff on the significance of Data Protection Compliance.

DPIA

The NDPA states that a Data Protection Impact Assessment (DPIA) should be conducted where an organisation intends to embark on a project that would involve the intense use of personal data. The DPIA should be conducted to identify possible areas where breaches may occur and devise means of addressing such risks. Our methodology for this entails audit and project management elements.

AUDIT

The NDPA (2023) mandates all Data Controllers to among other obligations conduct a Data Protection Compliance Audit annually and submit report of the audit to NDPC not later than 15th of March of the succeeding year. Our audit team will review and assess the policies, programs, processes and procedures the organisation has put in place to meet all its obligations under the NDPA (2023).

Contact our representative

Let’s TALK

Data Protection Compliance