NDPR 2019

Nigeria Data Protection Regulation

The Nigeria Data Protection Regulation (NDPR) 2019 is Nigeria's data protection framework that establishes requirements for the lawful processing, protection, and transfer of personal data while safeguarding the privacy rights of individuals and promoting responsible data management practices.

Book your strategy call View source ↗

Overview

The Nigeria Data Protection Regulation (NDPR) 2019 is Nigeria's foundational data protection regulation, issued by the National Information Technology Development Agency (NITDA) to regulate the processing of personal data and protect individuals' privacy rights. The regulation establishes principles for lawful data processing, consent management, data security, third-party processing, cross-border data transfers, and the rights of data subjects. Its objectives include safeguarding personal data, promoting secure data-driven transactions, preventing misuse of personal information, and supporting Nigeria's participation in the global digital economy through internationally aligned privacy standards. The NDPR applies to organizations that process the personal data of Nigerian citizens and residents and provides compliance, enforcement, and audit requirements designed to ensure accountability and responsible data handling practices.

Related in Cybersecurity

CybersecurityStandard

NDIS Practice Standards and Quality Indicators v4

The NDIS Practice Standards and Quality Indicators v4 is Australia's quality and compliance framework for registered NDIS providers, defining the standards and quality indicators required to deliver safe, person-centred, and high-quality disability supports and services.

NDIS Quality and Safeguards Commission • Australia • v4

View details

CybersecurityStandard

NDIS SIL Module — NDIS Supported Independent Living Module

The NDIS Supported Independent Living (SIL) Module is a supplementary NDIS Practice Standards module that sets quality and safety requirements for providers delivering Supported Independent Living services, ensuring participants receive person-centred supports that promote independence, choice, inclusion, and wellbeing.

NDIS Quality and Safeguards Commission • Australia

View details

CybersecurityStandard

CCC-2: 2024 — Cloud Cybersecurity Controls

The Cloud Cybersecurity Controls (CCC – 2: 2024) define minimum cybersecurity requirements for cloud computing services used by Cloud Service Providers (CSPs) and Cloud Service Tenants (CSTs) in Saudi Arabia. The controls aim to enhance national cybersecurity goals and mitigate cyber risks.

National Cybersecurity Authority (NCA) • Saudi Arabia • v2: 2024

View details

CybersecurityStandard

OTCC-1:2022 — Operational Technology Cybersecurity Controls

The Operational Technology Cybersecurity Controls (OTCC-1:2022), developed by Saudi Arabia’s National Cybersecurity Authority (NCA), establish minimum cybersecurity requirements for Operational Technology (OT) and Industrial Control Systems (ICS) environments. The framework aims to protect critical infrastructure from cyber threats and enhance operational resilience, safety, and security. OTCC consists of 4 domains, 23 subdomains, 47 controls, and 122 sub-controls, with requirements categorized across three control levels (L1, L2, and L3) based on facility criticality and risk.

National Cybersecurity Authority (NCA) • Saudi Arabia • v2022

View details

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks — automatically.

Book your strategy call