NITDA Extends Deadline To File Data Protection Audit Report To 30th June 2020

The National Information Technology Development Agency (NITDA) has granted a further extension of time for companies yet to comply with their data audit filing obligations under the Nigeria Data Protection Regulation (NDPR). Such companies now have till 30th June 2020 to file their Data Audit reports.

The announcement was made via a communique issued on the 8th of May 2020 to Data Protection Compliance Organisations and is spurred by the disruptive effect of the Covid-19 Pandemic on business and society. This information comes after NITDA’s earlier deadline extension to 15th May 2020 and after the agency’s decision that organisations that have filed an Initial Data Audit Report are not required to file another audit report for the year 2020.

The NDPR imposes obligations on all organisations that process personal data, to conduct a mandatory annual audit of their privacy and data protection practices. Organisations that have not filed any data audit report after this new deadline, would be in noncompliance and risk a penalty of up to 1% of their annual gross revenue for 2019.

The most crucial step to achieving compliance is engaging a licensed DPCO to undertake the required data collection and processing audit and carry out the necessary measures for complying with the NDPR.