Data Protection

Our commitment to protecting your personal data and privacy rights

Last updated: October 20, 2024

Data Protection Commitment

The Nigerians in Diaspora Emergency Response Center (NiDRes) is committed to protecting your personal data in compliance with Nigeria's data protection laws and international standards. This page outlines our data protection practices, your rights, and how we safeguard your information.

1. Legal Framework

Our data protection practices comply with:

  • Nigeria Data Protection Regulation (NDPR) 2019: Nigeria's primary data protection law
  • Nigeria Data Protection Bill 2022: Upcoming comprehensive legislation
  • General Data Protection Regulation (GDPR): For EU citizens and data transfers
  • International Standards: ISO 27001 and other global data security standards

As a government-affiliated organization, we also comply with Nigerian government data handling policies and international diplomatic protocols.

2. Data Controller Information

Data Controller:

Nigerians in Diaspora Emergency Response Center (NiDRes)

Contact Information:

Data Protection Officer: dpo@nidres.gov.ng

Address: Plot 123, Central Business District, Abuja, Nigeria

Phone: +234 (0) 123 456 7890

3. Lawful Basis for Data Processing

We process your personal data based on the following lawful grounds:

Contractual Necessity

Processing necessary for providing our services and fulfilling our agreement with you.

Legal Obligation

Processing required by Nigerian law and international treaties for consular services.

Public Interest

Processing necessary for emergency response, public safety, and diplomatic functions.

Legitimate Interest

Processing necessary for our legitimate interests in providing effective diaspora services.

Consent

Where we have obtained your explicit consent for specific processing activities.

4. Your Data Subject Rights

Under data protection laws, you have the following rights:

Right of Access

Request a copy of your personal data we hold and information about how it's processed.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data in certain circumstances.

Right to Restriction

Request limitation of how we process your personal data.

Right to Data Portability

Receive your personal data in a structured, commonly used format.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

5. Data Processing Activities

Emergency Response Processing

  • Processing emergency reports and coordinating responses
  • Sharing information with emergency services and embassies
  • Maintaining emergency contact records
  • Legal basis: Public interest and legal obligation

Consular Services Processing

  • Providing consular assistance and support
  • Verifying identity and citizenship status
  • Coordinating with Nigerian embassies worldwide
  • Legal basis: Legal obligation and public interest

Platform Operations

  • User account management and authentication
  • Communication and notification services
  • Platform analytics and service improvement
  • Legal basis: Contractual necessity and legitimate interest

6. International Data Transfers

As a global platform serving the Nigerian diaspora, we may transfer your data internationally. We ensure all transfers comply with data protection laws through:

  • Standard Contractual Clauses: Approved by relevant data protection authorities
  • Adequacy Decisions: Transfers to countries with adequate protection levels
  • Binding Corporate Rules: For transfers within our organization
  • Certification Schemes: Compliance with recognized data protection frameworks

All international transfers are documented and can be reviewed upon request.

7. Data Security Measures

We implement comprehensive security measures to protect your data:

  • Encryption: Data encrypted in transit and at rest using industry-standard algorithms
  • Access Controls: Role-based access with principle of least privilege
  • Regular Audits: Security assessments and vulnerability testing
  • Incident Response: 24/7 monitoring and rapid response procedures
  • Employee Training: Regular data protection and security training
  • Physical Security: Secure data centers with controlled access

8. Data Breach Notification

In the event of a data breach affecting your personal data, we will:

  • Notify the National Information Technology Development Agency (NITDA) within 72 hours
  • Notify affected individuals without undue delay
  • Provide clear information about the breach and potential risks
  • Recommend protective measures you can take
  • Document the breach and our response for regulatory compliance

Our incident response team is available 24/7 to handle security incidents.

9. Data Protection Officer

Contact Our Data Protection Officer

Email: dpo@nidres.gov.ng

Phone: +234 (0) 123 456 7890

Response Time: Within 30 days of receipt

Our Data Protection Officer is responsible for overseeing our data protection program and ensuring compliance with applicable laws and regulations.

10. Complaints and Regulatory Oversight

If you believe we have not adequately addressed your data protection concerns, you have the right to:

  • Lodge a complaint with NITDA: Nigeria's data protection regulatory authority
  • Contact the Nigerian Data Protection Commission when established
  • Seek judicial remedy through Nigerian courts
  • Contact relevant EU supervisory authorities if you're an EU citizen

NITDA Contact Information:

National Information Technology Development Agency

Email: dpo@nitda.gov.ng

Phone: +234 (0) 9 671 604 4

11. Updates to This Data Protection Notice

We may update this Data Protection Notice from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will:

  • Post the updated notice on our platform
  • Send notification emails to registered users
  • Provide a summary of key changes
  • Allow a reasonable period for you to review changes

Contact Us About Data Protection

Data Protection Inquiries

For questions about your data rights or our data protection practices:

Email: privacy@nidres.gov.ng

Phone: +234 (0) 123 456 7890

Emergency Data Concerns

For urgent data protection issues or suspected breaches:

Emergency Line: +234 (0) 123 456 7891

Available: 24/7

This Data Protection Notice was last updated on October 20, 2024. We are committed to maintaining the highest standards of data protection and privacy.