Assessing NDPR compliance

By Michael Irene, PhD The assessment of the Nigerian Data Protection Regulation compliance scheme seems like a chore to most Nigerian companies. This article gives a practical scenario for assessing NDPR compliance. For this scenario, let’s call the business Broski Enterprises Ltd. The company is a Nigerian mid-sized enterprise that exports consumer goods. Its sales and …

Assessing NDPR compliance Read More »

NDPR and the data protection officer function

NDPR and the data protection officer function By Michael Irene, PhD The Nigerian Data Protection Regulation states, under Implementation Mechanism, that every data controller shall: • Designate a Data Protection Officer to ensure adherence to this [NDPR] Regulation, relevant data privacy instruments and data protection directives of the data controller; • [and] may outsource data protection …

NDPR and the data protection officer function Read More »

NDPR and the Data Protection Officer Function

The Nigerian Data Protection Regulation states, under Implementation Mechanism, that every data controller shall: • Designate a Data Protection Officer to ensure adherence to this [NDPR] Regulation, relevant data privacy instruments and data protection directives of the data controller; • [and] may outsource data protection to a verifiably competent firm or person. This is new. …

NDPR and the Data Protection Officer Function Read More »

NDPR: Key Areas Companies Can Focus on

f anything, data protection compliance is something slightly new in Nigeria. It is new because Nigerian Data Protection Regulation (NDPR) is in its infant stages. As such, data compliance is relatively a new concept.  The chance of any Nigerian company attaining a hundred percent compliance is minuscule. This article points out, in brief detail, certain data …

NDPR: Key Areas Companies Can Focus on Read More »

An Introspection on Data Protection (3)

Nigerian companies must rebuild their dynamics to not only fit in what is called privacy-by-design but also ensure they maintain a privacy-by-default approach. They must also pay attention to the dynamic of their business and how it factors the Nigerian Data Protection Regulation. Compliance with GDPR is an opportunity for Nigerian companies to establish and …

An Introspection on Data Protection (3) Read More »

An Introspection on Data Protection (2)

Having got a historical glimpse of data protection regulations and its motivations, can one conclude that companies like MTN, Infinix, just to mention those two, who collect and process personal data about Nigerians violate human rights? The simple and short answer is yes. Read Infinix’s privacy policy and you would see this claim “[we] may …

An Introspection on Data Protection (2) Read More »

An Introspection on Data Protection (1)

In contemporary business, the collection, use, and possession of personal data remain vital. Without it, businesses would struggle to serve customers and carry out the necessary market analysis. Yet, most approaches to collecting and storing personal data borders on intrusion and trampling on human rights.  In this three-part article, I give a historical background to data …

An Introspection on Data Protection (1) Read More »

On Nigeria’s New Data Protection Regulation

The National Information Technology Development Agency (NITDA) has come up with the Nigerian Data Protection Regulation. This, indeed, is a welcomed development as Nigerian companies over the years, use customers’ data in a willy-nilly fashion. At the minimum, the regulation aims to “monitor the use of electronic data interchange and other forms of electronic communication transactions.” Without a …

On Nigeria’s New Data Protection Regulation Read More »