Data Processing Notice Template for Nigeria

The Data Processing Notice is a mandatory document required under the Nigeria Data Protection Regulation (NDPR) 2019 for organizations that collect and process personal data in Nigeria or of Nigerian residents. This document must be provided to data subjects before or at the point of collecting their personal data, explaining in clear and accessible language how their information will be handled. It forms a crucial part of an organization's data protection compliance framework and must be regularly reviewed and updated to reflect any changes in processing activities. The notice should address all requirements specified in Article 3.1 of the NDPR, including the identity of the data controller, purposes of processing, data subject rights, and security measures. Organizations must ensure this notice is easily accessible to data subjects and written in clear, plain language.

1. Introduction: Overview of the notice and its purpose

2. Identity and Contact Details: Information about the data controller/processor, including business name, address, and contact details of the Data Protection Officer

3. Types of Personal Data Processed: Detailed list of personal data categories collected and processed

4. Purposes of Processing: Explanation of why personal data is collected and how it will be used

5. Legal Basis for Processing: Description of the legal grounds under NDPR for processing personal data

6. Data Subject Rights: Explanation of rights under NDPR including access, rectification, erasure, and data portability

7. Data Security Measures: Overview of technical and organizational measures to protect personal data

8. Data Retention Period: Information about how long personal data will be kept

9. International Transfer Safeguards: Details of any international transfers and protective measures in place

10. Complaint Procedures: Information on how to file complaints and contact relevant authorities