Regulatory Oversight
Data Protection (NDPA)
Ensure your employee records and customer data workflows comply fully with the Nigeria Data Protection Commission requirements.
Your employee files are now regulated data.
The Nigeria Data Protection Act (NDPA) 2023, along with the General Application and Implementation Directive (GAID) 2025 framework, brought employee and customer records under strict, enforceable regulation.
HR holds the most sensitive data in most organisations — and typically, the least protected.
What We Do
- Data Audit & RoPA: Conducting complete data mapping and compiling your official Record of Processing Activities (RoPA).
- Lawful-Basis Mapping: Aligning how employee and client data is processed with one of the statutory bases permitted under the NDPA.
- Notices, Consents & Retention: Designing compliant internal privacy policies, client notices, and data retention schedules.
- Breach Response & Training: Setting up data breach incident response procedures and educating your team on secure data handling.
- Compliance Filings & DPO Support: Managing annual compliance audits and filings with the NDPC, and supporting your Data Protection Officer (DPO).
Sector Note: Financial Services
This is particularly critical for **pension operators, insurance firms, mortgage institutions, and microfinance banks** where regulatory scrutiny of customer data is heaviest and penalties for violations are severe.