Head of Service Reaffirms Data Protection Compliance in Mdas As Data Protection Bureau Extends Compliance Notice Deadline.

Share, like and Comment

The Office of the Head of the Civil Service of the Federation under Dr Folasade Yemi-Esan has issued a Guideline on Personal Information Technology Devices (PITeD) Provision and Usage in Ministries, Departments and Agencies (MDAs). The Guideline seeks, among others, to “foster strict adherence to government policies and global best practice in respect of data protection; provide clarity on the legitimate uses required on the part of users and the consequences of breaching the provisions of the Guideline”.

In order to reinforce data privacy and protection practices in MDAs, Part X of the Guideline provides inter alia:-

  1. Each MDA shall ensure that the usage of PITeD is consistent with Nigeria Data Protection Regulation and any regulatory instrument on data privacy and protection in Nigeria.
  2. The measures to be taken by each MDA for the purpose of data protection and accountability shall include but not be limited to the following:
  3. Designation or appointment of a suitable officer within the MDA as a Data Protection Officer (DPO).
  4. Development of a Data Protection Policy in line with the Nigeria Data Protection Regulation (NDPR) and other applicable regulatory instruments on data privacy and protection.
  • Forwarding the contact details of the data protection officer to the Office of the Head of Service and the Nigeria Data Protection
    Bureau.

It will be recalled that the Secretary to the Government of the Federation, Mr Boss Mustapha, recently issued a service-wide circular directing MDAs to comply with the provisions of the NDPR.

The Nigeria Data Protection Bureau National Commissioner, Dr Vincent Olatunji, has lauded the Head of the Civil Service of the Federation for taking this bold and strategic measure.  The Bureau sees this effort by the Federal Government as another clear demonstration of commitment to fundamental rights and freedoms which are often impacted by data processing.

In view of this encouraging development in the public sector, the National Commissioner has approved an extension of time for data controllers and data processors to comply with the earlier notice on National Data Protection Adequacy Programme (NaDPAP) Whitelist. The deadline for the submission of details of Data Protection Officers/Contacts, among others, has now been shifted to 20th of January, 2023.

Data Controllers and Processors who submitted before the deadline of November 25th, 2022 have been awarded full marks of 10 points under Accountability Metrics and Responsiveness to Regulatory Processes. This represents 10% of the total number of scores to be awarded in order to be eligible for inclusion on the NaDPAP Whitelist.

The Bureau will also evaluate data controllers and data processors on other performance metrics including but not limited to Implementation of NDPR Compliant Privacy Policy; Sensitization of Data Subjects on Data Subjects Rights; Filing of Annual Compliance Audit Returns and Globally Acceptable Information Security Certifications.

 


Share, like and Comment

Leave a Reply

Your email address will not be published.

Next Post

To Boost Food Security, Three Agritech Inventors Are Awarded A $20,000 Grant.

Fri Dec 2 , 2022
Share, like and CommentHeifer International’s ‘AYuTe Africa Challenge Nigeria’ has awarded three agritech entrepreneurs $20,000 in cash grants to rewrite the history of agriculture in Nigeria and to rethink farming and food production on the entire continent. A total of five finalists competed in the grand final, which was held […]

GLO DATA POOL PARTY

GLO Data Pool Party