ii. Assistance: NITDA may provide technical assistance to stakeholders to help them comply voluntarily with the applicable provisions of the NDPR. This assistance may be provided through the DPCOs. iii. Self-Reporting: Concerned entities will be required to proactively provide information to show compliance with the applicable provisions of the NDPR. iv. Monitoring and Analytics: NITDA shall ensure the proactive monitoring and evaluation of personal data processing by concerned entities. The Agency may deploy analytic tools and processes to identify patterns that reflect non-compliance. 3.2 Compliance Checklist for Data Controllers and Data Administrators In enhancing compliance and reducing liabilities, Data Controllers and Data Processors shall: i. within twelve months of incorporation and then on an annual basis conduct a data protection audit.; ii. process data only on legally justifiable basis as provided in Article 2.2 of the NDPR; iii. prepare and publish a privacy policy on every medium of personal data collection within 3 months of commencement of business operations in line with Article 2.5 of the NDPR iv. have a privacy policy on their site and send messages to inform data subjects of developments requiring new or different consent. Publicity of the privacy policy may be fulfilled through any one or combination of the following: ➢ publication on the website; ➢ publication in a digital media; 5|Page