NITDA NIGERIA DATA PROTECTION REGULATION 2019 IMPLEMENTATION FRAMEWORK

A Framework provides guidance for implementing the Nigeria Data Protection Regulation, helping organizations comply with rules on collecting and protecting personal data. It targets public and private organizations, data controllers, and processors. The framework aims to foster a culture of data protection and safeguard citizens' rights.

What Is This Policy?

The implementation framework for the Nigeria Data Protection Regulation 2019, providing practical guidance for organisations on how to comply with NDPR requirements for collecting, processing, and protecting personal data of Nigerians.

Who Does It Target?

All organisations (public and private) that collect or process personal data of Nigerians Data Protection Compliance Organisations (DPCOs) licensed by NITDA Data controllers and processors Nigerian citizens whose data is processed

What Does It Aim to Achieve?

Provide a practical operational guide for organisations to comply with the NDPR, protect citizens' personal data rights, and establish a culture of data protection in Nigeria.

Key Features

Compliance Steps: Outlines the step-by-step process for achieving NDPR compliance including data audits, policy development, and training. DPCO Framework: Establishes Data Protection Compliance Organisations licensed by NITDA to help other organisations comply. Data Subject Rights: Explains how organisations must honour data subject rights including access, correction, and deletion. Breach Response: Prescribes the 72-hour breach notification requirement and response procedures.

Current Status

Rollout Stage: Active (NDPC now oversees NDPR under the Nigeria Data Protection Act 2023) Coverage: All organisations processing personal data of Nigerians Beneficiaries: Nigerian citizens; data protection system Funding: NITDA; NDPC

How to Access

All organisations collecting personal data must conduct a data audit Appoint a Data Protection Officer where required File annual data protection compliance audit reports with NITDA/NDPC NDPR compliance filings through licensed DPCOs Application method: Access the framework at https://www.nitda.gov.ng; file compliance reports through licensed DPCOs.

Important Terms

NDPR is Nigeria's principal data protection regulation, replacing NITDA's earlier guidelines The Nigeria Data Protection Act 2023 established the NDPC as the successor body Non-compliance attracts fines of up to 2% of annual gross revenue or N10 million

Impact & Metrics

Nigeria's NDPR was among Africa's first comprehensive data protection frameworks; over 1,000 DPCOs licensed to support compliance.

Official Resources

Website: https://www.ndpc.gov.ng Contact: Nigeria Data Protection Commission (NDPC) / NITDA

Legal Framework

The NITDA Nigeria Data Protection Regulation 2019 (NDPR) Implementation Framework was issued under the NITDA Act 2007 and served as the primary data protection instrument until the Nigeria Data Protection Act (NDPA) 2023 replaced it. The NDPR 2019 aligned with the EU GDPR framework, the ECOWAS Supplementary Act on Personal Data Protection, and the African Union Convention on Cyber Security. The NDPA 2023 now supersedes and consolidates the NDPR framework.