NITDA GUIDELINES FOR THE MANAGEMENT OF PERSONAL DATA BY PUBLIC INSTITUTIONS IN NIGERIA, 2020
Guideline · Technology
Policy date: 2020-01-01
Guidelines direct public institutions on managing personal data in line with data protection rules. They target government agencies and staff handling citizen information. This builds public trust in digital services.
NITDA GUIDELINES FOR THE MANAGEMENT OF PERSONAL DATA BY PUBLIC INSTITUTIONS IN NIGERIA, 2020
What Is This Policy?
NITDA's 2020 guidelines for federal government ministries, departments, and agencies on lawfully collecting, storing, processing, and protecting the personal data of citizens in compliance with the Nigeria Data Protection Regulation 2019.
Who Does It Target?
Federal government MDAs collecting citizen data Government ICT and data management officers Citizens whose data is held by government agencies NITDA as the data protection regulatory authority
What Does It Aim to Achieve?
Ensure government agencies handle citizens' personal data lawfully, responsibly, and securely, building public trust in digital government services.
Key Features
Lawful Basis: Government must have a lawful basis for collecting and processing citizens' personal data. Data Security: Requires technical and organisational security measures for protecting personal data. Data Subject Rights: Enables citizens to access, correct, and where appropriate request deletion of their personal data. Breach Notification: MDAs must report data breaches to NITDA within 72 hours of discovery.
Current Status
Rollout Stage: Active Coverage: All federal government data collection and management Beneficiaries: Citizens; data privacy; government trust Funding: NITDA / Federal Government
How to Access
Citizens may request access to their personal data held by government agencies File data protection complaints with NITDA at https://www.nitda.gov.ng MDAs must publish privacy notices explaining how they use citizen data Application method: Data access requests and complaints at https://www.nitda.gov.ng
Important Terms
These guidelines align with the Nigeria Data Protection Regulation (NDPR) 2019 The Nigeria Data Protection Commission (NDPC) now has oversight under the NDPA 2023 Government agencies that misuse personal data face regulatory sanctions
Official Resources
Website: https://www.nitda.gov.ng Contact: National Information Technology Development Agency (NITDA) / Nigeria Data Protection Commission
Legal Framework
The NITDA Guidelines for Management of Personal Data of Government Institutions are issued under the National Information Technology Development Agency Act 2007. They operate alongside the Data Protection Act 2023 (Nigeria Data Protection Act), the Freedom of Information Act 2011, and the Cybercrimes Act 2015. The Guidelines align with the OECD Privacy Framework, the Council of Europe Convention 108 on data protection, and the ECOWAS Supplementary Act on Personal Data Protection.