PREFACE It gives me immense pleasure to present the Implementation Framework for the Nigeria Data Protection Regulation (NDPR) 2019. The Framework builds on the NDPR and the Guideline for the Use of Personal Data by Public Institutions, May 2020 to further reinforce Nigeria’s implementation of data protection in a pragmatic and fit-for-purpose manner. NITDA’s methodical approach to data protection implementation has been a subject of interest around the world because of some unique offerings the Regulation has introduced. The NDPR has pioneered a functional data audit filing process that gives NITDA, as the information technology regulator, a good view of the state of information systems management in the country. It also establishes a public-private partnership regulatory compliance model which has empowered professionals to provide compliance-as-a-service thereby accelerating NDPR implementation across all sectors. I wish to put it on record that NITDA, working with the excellent blueprint laid by Dr. Isa Ali Ibrahim Pantami, the Hon. Minister of Communications and Digital Economy, has begun making Nigeria a sterling example of data protection implementation in the Global South. We are not oblivious of the critical importance of data protection law on digital economy, hence we are daily reviewing and revamping the implementation architecture through robust stakeholder engagements. I am glad to say that through our dedicated and methodical approach, NDPR has become a household name within and outside Nigeria. This indicates the level of awareness and ownership of the Regulation by Nigerians. This Framework is a product of robust partnership and inclusive thinking both within and outside Nigeria. I want to appreciate all our Data Protection Compliance Organisations (DPCO) who reviewed the document in November, 2019; Aissatou Sylla of Hogan Lovells LLP (France) who provided global perspectives, and the law firm of Udo-Udoma, Belo Osagie (UUBO) for final vetting, among many other contributors. I am also very proud of our astute and dynamic staff who prepared the initial draft and managed the stakeholder process to completion. Kashifu Inuwa Abdullahi, CCIE Director General/CEO, NITDA 3rd August, 2020 1|Page

Select target paragraph3