For non-compliance with key processes in the Nigerian Data protection Regulation (NDPR), the Nigerian Information Technology Development Agency (NITDA) is set to notify about 100 firms including banks, fintechs, betting companies, airlines and others.
Recall that the types of privacy data NDPR protect for individuals include basic identity information such as name, address and ID numbers.
Others are web data such as location, IP address, cookie data and RFID tags.
Personal data due for protection include health and genetic data, biometric data, racial or ethnic data, political opinions and sexual orientation.
In EU, the purpose of the General Data Protection Regulation (GDPR) is to provide a set of standardised data protection laws across all the member countries. This should make it easier for EU citizens to understand how their data is being used, and also raise any complaints, even if they are not in the country where it’s located
Business Hilights recalls that the NDPR, issued in January this year, was created to provide a clear framework for the security and privacy of Nigerians using, collecting, storing or transferring personal data.
According to NITDA, organisations in the public and private sectors were expected to have updated their privacy policies in line with the NDPR by April 25 and filed their initial data audit report by October 25, 2019.
NITDA said “The first batch of 100 companies will be contacted in a few days. These companies include fintechs, betting companies, airlines among others. While NITDA desires to enforce the NDPR, we want to ensure that the requisite processes for justice administration are fully complied with to avoid unnecessary judicial backlash.
Already, the agency said it had constituted a data breach investigation team, which was working with the Inspector-General of Police (IGP) and other security operatives.
However, the Federal agency revealed that as at this week, only 94 companies had fully complied with the NDPR while 200 firms had been granted extension to submit their initial data audit reports based on request they made to the agency.
