NDPA
Nigeria Data Protection Act 2023: gap assessments, processing activities, DPIAs, data subject requests, breach management and cross-border transfers.
NDPA Module Overview & Dashboard
The Nigeria Data Protection Act (NDPA) 2023 is Nigeria's comprehensive data protection legislation, replacing the earlier NDPR 2019. It establishes the Nigeria Data Protection...
Gap Assessment
The NDPA Gap Assessment evaluates your organisation's compliance maturity across 10 chapters covering all key provisions of the Nigeria Data Protection Act
Processing Activities
The Processing Activities module maintains a register of all personal data processing operations, similar to GDPR's Record of Processing Activities (ROPA) but with...
Data Protection Impact Assessments
Data Protection Impact Assessments (DPIAs) are required under Section 28 of the NDPA when processing is likely to result in high risk to the rights and freedoms of data
Data Subject Requests
Log access, rectification, erasure, restriction and portability requests under NDPA sections 34 to 38, handle child data subjects, and track each SLA.
Breach Management
How the NDPA Breach Register tracks the 72-hour NDPC notification clock, the five-stage workflow, duty of care assessments and data subject notifications.
Cross-Border Transfers
Record each transfer of personal data outside Nigeria under NDPA sections 41 to 43 with its mechanism: adequacy, standard clauses, NDPC or Assembly approval.
DCPMI Registration & Compliance Audit Returns
Sections 44-45 of the NDPA establish a unique compliance mechanism: organisations processing data of major importance must register with the NDPC and file annual Compliance Audit...