Follow Us on Google
From Adanna Nnamani, Abuja
The Nigeria Data Protection Commission (NDPC), has issued a Code of Conduct for Data Protection Compliance Organisations ( DPCOs) in Nigeria, in a bid to ensure professionalism among firms that are licensed to carry out compliance as a service.
This was disclosed in a statement issued by Spokesperson of NDPC, Mr Itunu Dosekun on Tuesday.
According to Dosekun, the NDPC National Commissioner, Dr. Vincent Olatunji, while addressing the DPCOs in his office in Abuja, urged them to see their role in the implementation of the Nigeria Data Protection Act (NDPA) 2023 as a public trust which must be guarded with utmost sense of responsibility.
Olatunji was quoted highlighting the opportunities presented by the Act particularly the lawful use of data and job creation in data processing value chain.
The statement read: “It will be recalled that NDPA 2023 under section 33 vests the Commission with the power to license persons having a requisite level of expertise, in relation to data protection and the Act, to monitor, audit and report on compliance by data controllers and data processors.
“This is a unique Public Private Partnership model which is designed to promote trust and confidence in Nigeria’s digital economy which – like other economies around the world – thrives on data processing.
“In line with the Code of Conduct, the compliance services that may be offered by DPCOs include but are not limited to the following: awareness and capacity building; registration of the data controller or a data processor with the Commission;and development of compliance schedules
“Others are: implementation of compliance schedules; NDPA Compliance Audit and filing of Compliance Audit Returns with the Commission; Data Privacy Impact Assessment; and Facilitating and Vetting Data Privacy Agreement
“For a firm to operate as a DPCO and carry out compliance services, it must, among others, be duly licensed by the Commission and it must have a verifiably certified Data Protection Officer. As of November, 2023 163 DPCOs have been licensed by the Commission.
“Whilst presenting the Code of Conduct to the DPCOs, the Commission’s Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, Esq X-rayed the target objectives and the principles, particularly: Privacy Consciousness, Capacity Building, Accountability, Data Ethics and Corporate Social Responsibility. All DPCOs will be held accountable in line with the provisions of the NDPA, the Code of Conduct and other regulatory instruments that will be issued by the Commission going forward.”
