Data Protection Audit Notice

The Nigeria Data Protection Regulation, 2019 ("NDPR") requires organisations that collect and process personal data of Nigerians and Nigerian residents to adopt appropriate systems and processes to ensure adequate protection of personal data and the rights of individuals. In order to achieve this, organisations are required to, among other steps:

• develop and maintain security measures, such as securing systems from hackers, setting up firewalls, secure storage of data with access restricted to specific authorized individuals, deployment of data encryption technologies, protection of emailing systems etc, to protect data;
• develop and maintain an organizational policy for handling personal data (and other sensitive or confidential data), which must be published on all media through which personal data is being collected or processed;