NITDA Grants A 3-Month Extension To Data Controllers To File Their Initial Data Protection Audit Report

The National Information Technology Development Agency (NITDA) has granted a three-month extension to Data Controllers and Processors (organizations and entities who collect and process personal data of individuals) to conduct a data protection audit and file their initial audit report to the NITDA. The NITDA also disclosed that the extension does not limit its right to investigate and enforce data breaches against non-compliant Data Controllers.

Details

On 25 January 2019, the NITDA issued the Nigerian Data Protection Regulation (NDPR) to regulate and impose penalties on Data Controllers and Processors for the protection of privacy rights of individuals. Article 4.1(5) of the NDPR mandates Data Controllers to submit an initial audit report within six months of issuance of the Regulation.