Data Protection and NDPA 2023 Compliance
A practical 3-week guide to the Nigeria Data Protection Act 2023: principles, lawful bases, data subject rights, DPIAs, vendors, breach response within 72 hours and building a compliance programme. Includes a recurring certificate valid for 24 months.
Every organisation that collects names, phone numbers, BVNs, health details or exam results is processing personal data, and in Nigeria that processing is governed by the Nigeria Data Protection Act 2023 (NDPA) and supervised by the Nigeria Data Protection Commission (NDPC). Customers, regulators and partners now expect organisations to show, not just claim, that personal data is handled lawfully and securely.
This course translates the law into day-to-day practice. You will map the personal data your team handles, choose the right lawful basis, write clear privacy notices, respond to access and deletion requests, assess high-risk projects with a Data Protection Impact Assessment (DPIA), manage vendors and cross-border transfers, and run a breach response that meets the 72-hour notification requirement. Each week ends with a practical assignment you can reuse at work.
It is designed for administrators, HR and finance staff, school and training-centre managers, IT and product teams, compliance officers and anyone preparing to support a Data Protection Officer. Completing Cybersecurity Awareness for the Workplace first is recommended (it is the first course of the Digital Trust and Compliance learning path).
Important: this course is practical training, not legal advice. Always check the current text of the Act and guidance published by the NDPC for your specific situation.
Recurring certificate: data protection rules and guidance evolve, so the certificate for this course is valid for 24 months. You will be reminded 30 days before it expires and re-enrolled at no cost to refresh your knowledge and earn a new certificate.
This course translates the law into day-to-day practice. You will map the personal data your team handles, choose the right lawful basis, write clear privacy notices, respond to access and deletion requests, assess high-risk projects with a Data Protection Impact Assessment (DPIA), manage vendors and cross-border transfers, and run a breach response that meets the 72-hour notification requirement. Each week ends with a practical assignment you can reuse at work.
It is designed for administrators, HR and finance staff, school and training-centre managers, IT and product teams, compliance officers and anyone preparing to support a Data Protection Officer. Completing Cybersecurity Awareness for the Workplace first is recommended (it is the first course of the Digital Trust and Compliance learning path).
Important: this course is practical training, not legal advice. Always check the current text of the Act and guidance published by the NDPC for your specific situation.
Recurring certificate: data protection rules and guidance evolve, so the certificate for this course is valid for 24 months. You will be reminded 30 days before it expires and re-enrolled at no cost to refresh your knowledge and earn a new certificate.
What You'll Learn
By the end of this course, learners will be able to:
Explain the purpose, scope and key terms of the Nigeria Data Protection Act 2023
Apply the principles of lawful processing to everyday tasks
Choose an appropriate lawful basis and obtain valid consent
Recognise and respond to data subject rights requests
Write a clear privacy notice and keep records of processing
Carry out a basic Data Protection Impact Assessment
Manage processors, vendors and cross-border transfers responsibly
Respond to a personal data breach and meet the 72-hour notification requirement
Outline the building blocks of an organisational compliance programme
Recurring certificate: valid 2 years
The certificate for this course stays valid for 2 years, so employers know your knowledge is current. You are reminded 30 days before it expires, then enrolled again at no cost to refresh the course and earn a new certificate.
How recurring certification worksPart of a learning path
Digital Trust and Compliance Professional3 courses for ₦85,000 (save ₦25,000)
Take this course on its own, or get it with the other courses of the path at the bundle price.
Prerequisites
Comfort with everyday office tools (e-mail, spreadsheets, documents)
Some experience of handling customer, student or staff records is helpful
Completing Cybersecurity Awareness for the Workplace first is recommended
No legal training is required
Course Content
12 lessonsWeek 1: Foundations of Data Protection and the NDPA 2023
What personal data is, who the NDPA applies to, the principles of processing, and the lawful bases including consent.Weekly objectives
By the end of Week 1, learners will be able to:
Define personal data, sensitive personal data, controller, processor and data subject
Explain the role of the Nigeria Data Protection Commission
Apply the processing principles to real tasks
Select a lawful basis and recognise valid consent
Why Data Protection Matters and the NDPA at a Glance
50 minThe Principles of Lawful Processing
50 minLawful Bases and Valid Consent
50 minInteractive: Week 1: Foundations of Data Protection and the NDPA 2023
75 minWeek 2: Data Subject Rights, Transparency and Accountability
Handling rights requests, writing privacy notices, keeping records, carrying out DPIAs, and managing vendors and international transfers.Weekly objectives
By the end of Week 2, learners will be able to:
Recognise each data subject right and respond to requests
Write a clear, layered privacy notice
Decide when a DPIA is needed and carry one out
Put appropriate contracts and checks in place for processors and transfers
Data Subject Rights and Handling Requests
50 minPrivacy Notices, Records and Data Protection Impact Assessments
55 minProcessors, Vendors and Cross-Border Transfers
45 minInteractive: Week 2: Data Subject Rights, Transparency and Accountability
75 minWeek 3: Security, Breach Response and Building a Compliance Programme
Security of processing and retention, the 72-hour personal data breach response, and how to build and sustain an organisational compliance programme.Weekly objectives
By the end of Week 3, learners will be able to:
Apply appropriate security measures and retention schedules
Assess and respond to a personal data breach within 72 hours
Describe the role of a Data Protection Officer and the compliance cycle
Explain the consequences of non-compliance
Security of Processing and Retention in Practice
45 minPersonal Data Breaches: The 72-Hour Response
55 minBuilding and Sustaining a Compliance Programme
50 minInteractive: Week 3: Security, Breach Response and Building a Compliance Programme
75 min
Tochukwu Udeh
Lead Instructor
About the Instructor
Improving lives, unlocking potentials and fulfilling destinies
No Reviews Yet
Be the first to review this course!
₦45,000.00
Register to Enroll
Duration
21.00 hours
Level
Intermediate
Lessons
12
Grading Breakdown
Assignments
40.00%
Quizzes
40.00%
Attendance
20.00%
Certificate
Yes
recurring, valid 2 years
recurring, valid 2 years
Related Courses
You might also be interested in these courses
