13. 13.1 DATA PROTECTION IN MDAS (Art. 4.1(1) NDPR) NITDA shall deploy strategies and programmes to improve electronic governance in public institutions. All Public Institutions (PIs) are required to comply with the Guidelines for the Management of Personal Data by Public Institutions in Nigeria 2020, issued by the NITDA in May 2020. NITDA shall encourage and coordinate the process of improving data protection in PIs through training and process change management. 13.2 Every PI shall publish a privacy policy on its website and any other digital media platform through which it collects Personal Data. A sample Privacy Policy for PIs is available in Annexure B for guidance. 13.3 Every MDA shall domicile data protection function in a Department or Unit under the CEO’s office and designate an officer with proven knowledge of data protection to oversee the function. The Officer, who may be referred to as the Data Protection Officer shall be responsible for: • informing and advising the MDA on compliance with NDPR and other applicable data protection laws and policies; • monitoring compliance with the Regulation and with the internal policies of the PI including assigning responsibilities, awareness raising and training members of staff; and • facilitating the cooperation with relevant stakeholders and acting as the liaison between the PI and the NITDA. 14. RELATIONSHIP WITH THE ATTORNEY-GENERAL OF THE FEDERATION (Art. 2.11 NDPR) 14.1 Generally, an adequacy decision shall be issued by the NITDA in respect of transfer to foreign countries if Part Two of the NDPR is 28 | P a g e