In extending the deadline, NITDA’s Management considered the continued effect of the COVID-19 pandemic, the renewed interest of organisations to comply with data protection regulations and obligations; and the aggregated requests for extension of the deadline by DPCOs.

The National Information Technology Development Agency (NITDA) is established by the NITDA Act of 2007. The agency serves as a regulator for information technology and data protection.

In January 2019, NITDA issued the Nigeria Data Protection Regulation (NDPR) pursuant to Section 6 (a,c) of the NITDA Act 2007.  The NDPR seeks to regulate organizations that process personal data of individuals in Nigeria.

The NDPR mandates such organisations to conduct a data protection audit and file the audit report with NITDA through a Data Protection Compliance Organization (DPCO) by 15th March of every year. Failure to comply with provisions of the NDPR results in sanctions and penalties as provided under the NITDA Act and the NDPR.

Jackson, Etti & Edu is a licensed DPCO. Please contact the undersigned for more information on how we can help your company comply with the NDPR.

Ngozi Aderibigbe

Partner & Sector Head, Technology, Media & Entertainment

ngoziaderibigbe@jee.africa

+234 (0) 805 440 0049