5 Steps to Compliance with the Nigeria Data Protection Regulation | Tech Zen

NITDA launched the ground-breaking Nigeria Information Safety Regulation (NDPR) in early 2019, cementing a tradition of information privateness and safety for all Nigerians. By mirroring Europe’s GDPR Framework, NITDA demonstrated its dedication to safeguarding residents’ on-line safety.

Non-public organizations, equivalent to cellular growth corporations that management or course of information, should adjust to this regulation to remain operational. Thankfully, we’re right here that can assist you keep away from any expensive missteps.

Comply with our 5-step course of for confidently navigating the NDPR compliance necessities!

Why is it Necessary to Adjust to Nigeria’s Information Safety Regulation?

Non-compliance with NDPR can result in the next:

• Hefty Fines: Organizations that do not respect information privateness in Nigeria or are non-compliant with the regulation could need to pay 2% of their annual turnover or 10 million Naira, whichever is increased.
• Sanctions: The Nationwide Info Expertise Improvement Company may impose sanctions on organizations that fail to adjust to the NDPR. They’ll revoke your license or impose a brief or everlasting ban impacting your operations.
• Reputational Injury: Non-compliance with private information safety legal guidelines equivalent to NDPR may result in reputational injury. This will result in a lack of buyer belief & model worth and, finally, buyer churn. And this will additional impression what you are promoting’s backside line.
• Civil Liabilities: Firms might also be answerable for any injury induced to people due to their voluntary or involuntary actions. 

In a nutshell, non-compliance with NDPR might be detrimental to what you are promoting. Subsequently, it is important that you just begin implementing the rules. However how? Learn alongside to search out out.

Please Notice. Because the NDPR is comparatively new, and penalties & mechanisms are nonetheless being developed and examined, the above checklist may range with time.

5 Simple Steps to Adjust to the Nigeria Information Safety Regulation (NDPR)

1) Decide if Your Group is a Information Controller or Information Processor

Step one in direction of being compliant is discovering in case you’re a knowledge processor or a knowledge controller. Here is the distinction between the 2:

• Information Controller: Information controller is the one which determines the aim of information and decides through which method will probably be processed. The info controller decides how the information is collected, used, and disclosed in accordance with information safety compliance. It is the obligation of the information controller to make sure that private information is obtained with express person consent.
• Information Processor: However, the information processor processes customers’ private information on behalf of the information controller.

Why is it essential to find out what sort of information handler you’re? 

Effectively, it is essential as a result of most information compliance obligations are imposed on the information controller. The info controller shall be held answerable for any violation executed by the information processor or the information controller.

After pinpointing the precise nature of your group, it is essential to make sure that information assortment and storage processes are in keeping with all vital NDPR laws. Taking a step again to find out compliance might be a useful funding for any enterprise – permitting you to grasp the place precisely you stand when defending confidential data!

2) Mitigate the Points

As soon as you realize what processes your group follows and the place it stands by way of information safety, it’s good to take care of the problems.

For example you discover that your group is not accumulating information appropriately. Step one must be tweaking the information assortment processes so that you accumulate information solely with express consent from the customers. And in case your group is not storing or dealing with private information appropriately, you might have to go for information encryption applied sciences. 

3) Appoint a Information Privateness Workplace (DPO)

Much like GDPR, to adjust to NDPR, you have to appoint a Information Privateness Workplace (DPO), which might be a person or an entity. Listed here are the first roles of a Information Privateness Officer:

• Monitoring Inner Compliance: The DPO displays your group’s compliance with the NDPR and different information safety laws. They make sure you take acceptable organizational and technical measures to guard private information.
• Providing Steerage: The DPO gives recommendation and steerage on information safety issues. This consists of guaranteeing the staff are conscious of the obligations below information safety legal guidelines and offering coaching on information safety subjects.
• Serving as a Contact Level: The DPO additionally acts as a contact particular person between your group and the NITDA on information safety issues.
• Conducting Information Safety Impression Evaluation: The DPO is liable to conduct information safety impression assessments or DPIAs to determine and take care of any potential dangers linked to the processing of private information.

 

4) Submitting Experiences to Nationwide Info Expertise Improvement Company (NITDA)

The info controllers who course of the non-public information of over 1000 topics in 6 months should submit a smooth copy of the audit to the NITDA by means of their appointed DPOs. Furthermore, information controllers who course of the non-public information of over 2000 people in 12 months have to submit a replica of the audit yearly. Here is what the audit should include:

• An in depth description of information processing actions, together with the kind of information you accumulate and the aim. Additionally, it’s good to reveal the events with whom the information is shared.
• Detailed data on the information safety procedures and insurance policies your group has in place.
• Proof of compliance with the NDPR. You may connect information safety impression evaluation information, proof of acquiring the consent of the customers earlier than accumulating their information, and many others.
• Outcomes of danger assessments, compliance opinions, and inner audits your group has carried out.

 

5) Explicitly Prepare your Employees

Along with following the above steps, you additionally want to coach your employees. As a result of provided that your employees/workers know the significance of NDPR will they be capable to comply with the laws and enable you keep compliant. And to make sure that, you may attain out to coaching businesses or people licensed by the NITDA.

Wrapping Up

Are you able to launch your cellular app in Nigeria? Comply with the 5-step course of and cling to NDPR tips. To make sure information privateness is preserved, seek the advice of our Safety guidelines for steerage when growing or publishing a cellular software (iOS/Android). Be sure your group and its merchandise are held as much as Nigerian requirements – now let’s get that app on the market!