Data Protection Compliance - Conducting Annual Data Protection Audits

Did you know that:

• The Nigeria Data Protection Regulations 2019 ("NDPR") requires organisations to conduct a detailed audit of their privacy and data protection practices at inception and thereafter on an annual basis where they process the Personal Data of Nigerian citizens and residents utilising the services of a licensed Data Protection Compliance Organisation ("DPCO").

• Based on the provisions of Regulation 4.1(7) of the NDPR, where your organisation as a Data Controller processes the Personal Data of more than 2,000 Data Subjects within a period of 12 months, your organisation is required to, not later than the 15th of March of the following year, submit a summary of its data protection audit to the Nigeria Data Protection Bureau ("NDPB").