Why Data Protection Matters

Personal data represents real people—customers, employees, patients, students and business partners. Protecting it helps prevent fraud, identity theft, discrimination and other harm caused by misuse or unauthorised disclosure.

For an organisation, data protection helps to:
- Build trust: People expect their information to be handled responsibly.
- Support compliance: Responsible data handling helps fulfil obligations under the NDP Act 2023.
- Protect reputation: A data breach can damage relationships and public confidence.
- Reduce disruption and costs: Privacy incidents can interrupt operations and require costly investigations and recovery.
- Respect individual rights: People should understand how their information is used and be able to exercise their rights.
Every staff member has a role to play. Checking an email recipient, securing a document and reporting a suspected breach promptly can prevent serious harm.

Why Data Protection Matters

Test of Understanding: Why Data Protection Matters

This practical module helps staff apply the core data protection principles of the NDP Act 2023 to everyday workplace activities. It covers lawful, fair and transparent processing, purpose limitation, data minimisation, accuracy, storage limitation, security and accountability.

Through relatable examples and knowledge checks, participants explore lawful bases for processing personal data, what makes consent valid, and how to collect only necessary information, maintain accurate records and dispose of data securely when it is no longer needed.

By the end of the module, participants will be able to recognise common data handling mistakes, follow organisational retention requirements and apply simple security measures to protect personal data in both digital and paper records.

Who should attend: All staff who collect, access, use, share or store personal data. No prior legal or technical knowledge is required.

The Principles in Practice 

Test of Understanding: The Principles in Practice

The Principles in Practice

This practical module equips staff to recognise and respond to data subject requests and suspected personal data breaches. It introduces key individual rights under the NDP Act 2023 and explains how employees can support their organisation’s response.

Through workplace scenarios and knowledge checks, participants learn to recognise requests received through different channels, follow identity verification procedures, record requests and promptly refer them to the Data Protection Officer (DPO).

The module also explores common breaches, including misdirected emails, lost devices, phishing and unauthorised access. Participants learn to report concerns immediately, preserve evidence and support a coordinated response.

By the end of the module, staff will understand their everyday responsibilities for respecting individuals’ rights, escalating incidents and following organisational procedures.

Who should attend: All staff. No prior legal or technical knowledge is required.

Your Role Every Day

Test of Understanding: Your Role Every Day

This practical awareness course introduces employees to the Nigeria Data Protection Act 2023 and their role in protecting personal data at work. It explains essential data protection concepts in clear, accessible language and helps staff apply responsible data handling practices in their everyday duties.Through workplace scenarios and interactive exercises, participants learn to recognise personal and sensitive personal data, understand key data protection principles, and handle information securely when collecting, using, storing, sharing and disposing of it. The course also covers recognising potential data breaches, reporting concerns promptly, and referring data subject requests to the appropriate person within the organisation.By the end of the course, participants will be able to:<ul><li>Identify personal data and common privacy risks in their work.</li><li>Apply essential data protection principles to everyday tasks.</li><li>Use email, digital tools and physical records more securely.</li><li>Recognise and escalate suspected data breaches.</li><li>Respond appropriately when individuals raise privacy concerns or exercise their rights.</li></ul>Who should attend: All employees, managers, interns, contract staff and other personnel who handle personal data.Prerequisites: No prior legal or technical knowledge is required.

This practical awareness course introduces employees to the Nigeria Data Protection Act 2023 and their role in protecting personal data at work. It explains essential data protection concepts in clear, accessible language and helps staff apply responsible

NDP Act 2023 Essentials for All Staff

Data Protection & Privacy Academy

Course Details

Course content

Includes