The Nigerian Data Protection Regulation states, under Implementation Mechanism, that every data controller shall: • Designate a Data Protection Officer to ensure adherence to this [NDPR] Regulation, relevant data privacy instruments and data protection directives of the data controller; • [and] may outsource data protection to a verifiably competent firm or person. This is new. …
f anything, data protection compliance is something slightly new in Nigeria. It is new because Nigerian Data Protection Regulation (NDPR) is in its infant stages. As such, data compliance is relatively a new concept. The chance of any Nigerian company attaining a hundred percent compliance is minuscule. This article points out, in brief detail, certain data …
Nigerian companies must rebuild their dynamics to not only fit in what is called privacy-by-design but also ensure they maintain a privacy-by-default approach. They must also pay attention to the dynamic of their business and how it factors the Nigerian Data Protection Regulation. Compliance with GDPR is an opportunity for Nigerian companies to establish and …
Having got a historical glimpse of data protection regulations and its motivations, can one conclude that companies like MTN, Infinix, just to mention those two, who collect and process personal data about Nigerians violate human rights? The simple and short answer is yes. Read Infinix’s privacy policy and you would see this claim “[we] may …
In contemporary business, the collection, use, and possession of personal data remain vital. Without it, businesses would struggle to serve customers and carry out the necessary market analysis. Yet, most approaches to collecting and storing personal data borders on intrusion and trampling on human rights. In this three-part article, I give a historical background to data …
The National Information Technology Development Agency (NITDA) has come up with the Nigerian Data Protection Regulation. This, indeed, is a welcomed development as Nigerian companies over the years, use customers’ data in a willy-nilly fashion. At the minimum, the regulation aims to “monitor the use of electronic data interchange and other forms of electronic communication transactions.” Without a …
