NDPR Compliance
Data Protection: The Nigerian Perspective
The National Information Technology Development Agency ( NITDA) has come with the new Nigerian data Protection Regulation. this has become necessary as the concerns with regards to privacy and how companies manage them in Nigeria is important and must now be regulated.
NDPR Compliance Steps
Carry out a top-down Analysis:
A good starting point for developing a NDPR compliance program is carry out a quick top-down analysis to identify highly sensitive and/or high-risk items. This exercise also will enable the DPO to quickly understand the complexities that NDPR presents to the business, and to engage early with senior executives to define a strategy for compliance.
Assign the Data Protection Officer
The DPO role must be filled quickly to ensure the NDPR compliance program has the leadership needed to drive success. The business should also provide the assigned DPO ample time to consider the impact of NDPR, and to effect required changes.
Complete the DPIA:
The organisation must complete a top-down gap analysis and capture the results in a formal Data Protection Impact Assessment(DPIA) to meet
some NDPR requirements—privacy-by-desgin and privacy-by-default. This comprehensive analysis will form the
basis for formal planning activities.
Prioritise Actions
The business must prepare a comprehensive action plan to respond to all potential risk areas identified in the DPIA. Even though it will not be possible
to prepare a complete set of actions until the DPIA is complete, the organisation should not delay in commencing remediation of high-risk areas identified in the initial top-down analysis.
Plan Remediation:
The business should create a detailed project plan, with clearly defined roles and responsibilities, that is supported by an appropriate resourcing schedule. It also should prepare an analysis of critical dependencies. Organisations should not underestimate the importance of training, awareness and change management activities related to this plan.
Get Help in Applying NDPR & Cyber security to your business
Contact us today for an initial discussion of your requirements.