The National Information Technology Development Agency (NITDA) has extended the filing of the initial data audit report by data controllers and processors by three months. The government agency for IT clearing in Nigeria says the extension follows a series of appeals from data controllers.
NITDA, had based on article 4.1(5) of the NDPR requires Data Controllers to submit an initial audit report within six months of issuance of the Regulation (which lapsed on 25th July, 2019).
But in a statement signed by its Director General, Dr. Isah Pantami, NITDA noted that this extension period would elapse on Friday 25th October, 2019, stressing that it does not limit NITDA’s right to investigate and enforce other allegations of breach made against any Data Controller or Processor pursuant to the NDPR and the NITDA Act 2007.
NITDA had held a series of consultations with various industry and government stakeholders on the implementation of the Nigeria Data Protection Regulation (NDPR). The overwhelming consensus of all stakeholder groups is that, the NDPR is an appropriate regulation that would help provide clarity for data controllers and processors on the rights of data subjects, basis of processing personal data and transfer of data outside Nigeria among others.
In the statement, NITDA revealed that stakeholders, including other Sector Regulators, Government, Banks, Industry groups, Private Sector players among many others, have shown tremendous willingness towards compliance with the NDPR.