Paragraph TABLE OF CONTENTS Content Page 1 BACKGROUND 3 2 RELATIONSHIP OF THE NDPR TO THE FRAMEWORK 3 COMPLIANCE FRAMEWORK 4 4 HANDLING PERSONAL DATA 10 5 UNDERSTANDING CONSENT 11 6 DATA PROTECTION AUDIT 13 7 TRANSFER OF PERSONAL DATA ABROAD 17 8 RETENTION OF RECORDS 18 9 DATA PRIVACY BREACH 19 4 10 ENFORCEMENT FRAMEWORK 20 11 ESTABLISHMENT OF ADMINISTRATIVE REDRESS PANEL 26 12 THIRD PARTY PROCESSING 26 13 DATA PROTECTION IN MDAS 27 14 RELATIONSHIP WITH THE ATTORNEYGENERAL OF THE FEDERATION 28 15 CONTINUOUS PUBLIC AWARENESS AND CAPACITY BUILDING 29 16 APPLICATION OF INTERNATIONAL LAWS 29 ANNEXURE A: AUDIT TEMPLATE FOR NDPR COMPLIANCE 30 ANNEXURE B: SAMPLE PRIVACY POLICY TEMPLATE FOR PUBLIC INSTITUTIONS 37 2|Page