Data Protection for Nigerian Businesses: A Practical Starting Point

Businesses that collect or use personal information should understand their responsibilities under applicable data protection laws. Good practices begin with knowing what information is handled and why.

Map the information you collect

Identify the personal data your organisation collects, where it is stored, who can access it and the purposes for which it is used.

Review notices and access controls

Privacy information should be clear and appropriate to the processing activity. Access controls and staff guidance can help reduce unnecessary exposure.

Prepare for incidents

Organisations should consider how they identify, assess and respond to data incidents, including any applicable notification obligations.

This article provides general information and is not a substitute for advice on a specific matter.