Nigeria Data Protection Commission [hereafter referred to as “Data Controller” or NDPC] is an establishment of the Federal Government of Nigeria. The central mandate of NDPC is to implement the Nigeria Data Protection Act (NDPA) 2023.
Our contact information is provided under ARTICLE 12 of this Data Privacy Policy.
This privacy policy is in furtherance of section 37 of the Constitution of the Federal Republic of Nigeria (CFRN) 1999 (as amended), the Nigeria Data Protection Act (NDPA) 2023 and all other legal instruments designed to protect the privacy rights of natural persons.
As the “Data Controller”, we are cognizant of the privacy rights of all natural persons who are part of NDPC or interact with us on all our data processing mediums or platforms. These classes of people are our “Data Subjects”. As a responsible establishment, we are committed to safeguarding the privacy rights of our data subjects through this strict privacy policy. It shall complement extant legal regulatory framework as an internal standard of care we owe our “Data Subjects”.
In processing your personal data, we adhere strictly to the principles of data processing as set out under S.24 of the NDPA. Our obligation in terms of the principle is to ensure that personal data is:
Furthermore, we are committed to ensuring accountability, demonstrating duty of care to you and also upholding data Confidentiality, Integrity and availability.
Except as otherwise required by operation of law or principles of law, your consent as the data subject is paramount in our considerations. You have the right to give, withhold or otherwise withdraw your consent to data processing. For further understanding of the operation of the principle of consent under data processing. See S.26 of the NDPA 2023.
S/N | PURPOSE OF COLLECTION | TYPE OF DATA | LAWFUL BASIS |
---|---|---|---|
1 | REGULATORY ACTIONS | Name, Phone, Email Address, Contact Address, Sex, Date of Birth, passport and educational record. | LEGAL OBLIGATION. Some instances may involve public interest. |
2 | NOTIFICATIONS | Name, Phone, Email Address, Contact Address, Sex and Date of Birth. | LEGAL OBLIGATION. Some may require consent as prescribed by the NDPA. |
3 | DATA ANALYTICS | Name, Phone, Email Address, Contact Address, Sex and Date of Birth. | CONSENT. (To ensure that our services suit the purpose of data subjects and to measure our performance). Some may involve legitimate interest or legal obligation where analytics are tailored towards crime prevention. |
4 | SECURITY | Name, Phone, Email Address, Contact Address, Sex, Date of Birth and passport. | LEGAL OBLIGATION. For safety and security of lives and property. Some may involve legitimate interest or public interest where analytics are tailored towards crime prevention. |
5 | EMPLOYMENT | Name, Phone, Email Address, Contact Address, Sex, Date of Birth, passport, medical record, educational record. | CONTRACT. This is the major lawful basis. Some instances may involve other lawful basis such as consent, vital interest or legal obligation. |
6 | CONTRACT | Name, Phone, Email Address, Contact Address and Sex/td> | CONTRACT. Some instances may involve legitimate interest or public interest – particularly in carrying out due diligence. |
We hold your privacy rights very dear to our operations. Apart from the right to give, withhold or withdraw consent, you have rights to all relevant information that may guide you in making informed decisions about your personal data. For example, you have the right to be notified of anyone or any place to which we may transfer your personal data. Your rights under the NDPA include but are not limited to the following:
Note that you also have a right to lodge a complaint with the Commission. See Part VI of the NDPA.
As a public establishment, third parties may wish to provide essential services to you (through our platforms) while relying on the relevant lawful bases for processing your personal data in this regard. The type of data usually processed for this may be your contact details. Where such services depend on consent, you have the right to decline and further restrict the processing of your personal data. You can simply unsubscribe to the notices sent for the purpose of such services.
Customarily, websites are designed to collect certain information from the visitor. Our website is also designed to collect your IP address and other information that your web browser typically shares with the websites that you visit. The purpose of this is to know you better and to automatically and dynamically engage with you through your actions on our website.
“Cookies”, in computer parlance, are text files that are downloaded to your browsing devices such as phones or computers when you browse pages of websites. They contain small amounts of data and their essential function is to intelligently memorise your preferences and therefore present them to you as choices when you are browsing – even at different times. Note that various websites use cookies for different purposes some of which may undermine your privacy rights. We have taken measures to ensure that all methods adopted by us to engage automatically with you do not violate your privacy rights under the NDPA. In the case of cookies, we ensure that they have security protocols and are not vulnerable to abuses by anyone.
We use cutting-edge technologies and foolproof protocols to provide you with comprehensive layers of security in the area of personal data. Thus, we are constantly vigilant in preventing cyber-attacks, fraudulent intrusion, unauthorised access, loss or corruption of personal data. We are equally cognizant of the obligations imposed on us by law in terms of data protection. Accordingly, we conduct reviews of process and privacy impact assessment, carry out trainings and obtain strict warranties where applicable.
The purpose of data processing usually determines the length of time within which your personal data is stored with us and the residue of data actually stored for this purpose. We collect and store personal data that is reasonably required by law or best practice to serve you or respond to legitimate enquiry about our transaction with you. We take this responsibility very seriously in view of the need for you to enjoy your privacy as guaranteed under the 1999 Constitution of the Federal Republic of Nigeria and international human rights law.
Our website may contain links to other websites. Save and except as otherwise expressly stated by us, any link to another website is not covered by our privacy policy. We strongly advise that you should satisfy yourself with the details of any privacy policy provided on other websites or links.
In carrying out our mandate effectively, we may require the services of third parties who may be within or outside the NDPA jurisdiction (Nigeria). Examples of such services include but are not limited to the following:
In transferring your data to third parties, we shall be guided by the NDPA. See PART VIII of the NDPA.
We have provided a platform to respond promptly and satisfactorily to all your requests, suggestions and complaints. This is called the DPSU. We have a Data Protection Officer who is responsible for prompt action on your data privacy. Contact the DPSU via this link: dpo@ndpc.gov.ng. Our DPSU serves as the internal mechanism to carry out the following services amongst others:
The Data Controller (NDPC) reserves the right to alter the foregoing policy for the purposes of advancing data privacy rights, public interest or complying with lawful directives of the Federal Government – in line with the safeguards under the NDPA and the 1999 Constitution of the Federal Republic of Nigeria.
The Nigeria Data Protection Commission (NDPC), in collaboration with the Chairman, House Committee on Digital and Information Technology, Hon. Adedeji Stanley Olajide, conducted a five-day "Data Protection and Digital Literacy Training" in Ibadan, benefiting over 1,000 youths.
4The Nigeria Data Protection Commission was represented by Ms. Adamma Isamade, a legal officer in the Legal, Enforcement and Regulations Department, at the 6th @wto Trade Policy Review of Nigeria, held at the World Trade Organisation Headquarters in Geneva, Switzerland.
4The National Commissioner/CEO of the Nigeria Data Protection Commission, Dr Vincent Olatunji, was ably represented by the Head of the Legal, Enforcement, and Regulations Department, Babatunde Bamgboye Esq., at a knowledge-sharing session titled,....
4The Nigeria Data Protection Commission has signed a Memorandum of Understanding (MoU) with the National Insurance Commission (NAICOM). The National Commissioner/CEO of the NDPC, Dr Vincent Olatunji, led the Commission's delegation to the Commissioner for Insurance/CEO....
4The National Commissioner/CEO of the NDPC, Dr Vincent Olatunji chaired the validation workshop on the review of the ECOWAS Supplementary Act A/SA. 1/01/10 on Protection of Personal Data in ECOWAS region. The ECOWAS Supplementary Act was issued in 2010, hence the need for the
2The National Commissioner/CEO of the Nigeria Data Protection Commission (NDPC), Dr Vincent Olatunji, ably represented by the Head of Research and Development, NDPC, Dr Tolulope Pius-Fadipe, received in audience, a delegation from Women in Cybersecurity (WiCyS), led by the
2The National Commissioner/CEO of the Nigeria Data Protection Commission (NDPC), Dr Vincent Olatunji received in audience, a delegation from Cameroon, along with representatives from the Korea International Cooperation Agency (KOICA) Cameroon office. The Cameroonian delegation,
2In an effort to enhance data protection and privacy practices in Nigeria, a series of capacity-building sessions were held in Abuja and Lagos. These events were a collaborative initiative between the Nigeria Data Protection Commission (NDPC), the African Union Development Agency
2
The Nigeria Data Protection Commission (NDPC), led by the National Commissioner/CEO, Dr Vincent Olatunji, was at the office of the Nigerian Postal Service (NIPOST) to open a capacity-building program for NIPOST staff on data privacy and protection.
Receiving the Commission staff,
The National Commissioner/CEO of the Nigeria Data Protection Commission (NDPC), Dr. Vincent Olatunji, was represented by Ibukunoluwa Owa, a legal officer from the NDPC's Legal, Enforcement and Regulations Department, at The BusinessDay Breakfast Meeting, organized in partnership
2In recognition of the Nigeria Data Protection Commission's essential role in safeguarding privacy and institutionalising effective data protection mechanisms in Nigeria, the National Commissioner/CEO of the NDPC, Dr Vincent Olatunji, delivered a presentation at the 16th Meeting.
2At the Nigeria-UK Cybersecurity Trade Mission Stakeholder Roundtable, themed “Strengthening Nigeria's Cybersecurity Landscape 2024,” key stakeholders gathered to discuss critical issues and challenges in Nigeria's cybersecurity ecosystem.
2The National Commissioner/CEO, Nigeria Data Protection Commission, Dr Vincent Olatunji, led a delegation from the Commission to represent Nigeria at the 46th Global Privacy Assembly (GPA) holding in Jersey, Channels Island, United Kingdom.
2In line with the implementation of President Bola Ahmed Tinubu's renewed hope agenda in the area of economic growth and job creation, the Nigeria Data Protection Commission (NDPC) commenced a pilot test of the National Data Protection Certification process.
4
In its effort to create more awareness about
data protection and privacy, the Nigeria Data
Protection Commission has signed a Memorandum of
Understanding (MoU) with social media influencer,
Enioluwa Adeoluwa.
The National Commissioner/CEO of the Nigeria Data Protection Commission (NDPC), Dr Vincent Olatunji, received in audience members of the Association of Licensed Data Protection Compliance Organisation of Nigeria (ALDAPCON) led by its Chairman, Mr Ivan Anya.
2© Copyright 2024 by Nigeria Data Protection Commission
NDPC is a public institution that processes data in furtherance of public interest or the legitimate interest of the data subject. We process various categories of your data based on the type of engagement you have with us. Embedded applications or codes (which are in some cases called “cookies”) on our website may process your pattern of engagement with our website and thereby create automated responses and notifications that seem most likely to suit your interest. We accept your continued engagement with our website as your CONSENT to the processing of your personal data. Click here TO READ OUR DATA PRIVACY POLICY. This notice applies to NDPC. Make sure you read privacy notices on every website that you visit.
This will close in 0 seconds
We use cookies to enhance your browsing experience, content, and analyze our traffic. By clicking "Accept All", you consent to our use of cookies.