The global consensus that personal data is the "new
gold" has led to an avalanche of global and domestic
regulatory compliance obligations imposed on data controllers and
data processors under extant data protection laws such as the EU
General Data Protection Regulation 2016 ("GDPR"),
California Consumer Privacy Act of 2018 ("CCPA"), Nigeria
Data Protection Regulation 2019 ("NDPR"), amongst others.
In the light of these laws and regulations, organisations are now
facing increased pressure from well-informed customers and data
subjects as well as regulatory scrutiny from strong-willed data
protection regulators to prioritise and invest in data privacy
compliance.
More than ever before, data privacy has continued to take centre
stage at different levels within most organisations. As such, data
privacy, data security and compliance with privacy laws are no
longer just the core responsibilities of the Data Protection
Officer ("DPO") or the Information Security team. It
