Nigeria Data Protection Regulation (NDPR)

Implementation Framework 2020: NITDA's implementing requirements – Nigeria Data Protection Regulation (NDPR)

Nigeria Data Protection Regulation (NDPR) IF-12.2: Publish the list of third parties personal data may be shared with

Controllers must publish, and include in the audit report, a list of third parties with whom personal data may be shared, stating the categories of recipients, their jurisdiction, the purpose of disclosure and the type of data disclosed.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Implementation Framework 2020: NITDA's implementing requirements – Nigeria Data Protection Regulation (NDPR)

IF-12.3 Third-party processors: written authority, adequate security, and handling of rights requests
IF-13.2-13.3 Public institutions: published privacy policy and a data protection function under the CEO
IF-3.2(i) Data protection audit within twelve months of incorporation, then annually
IF-3.2(iii)-(iv) Publish the privacy policy within three months of starting business, through a recognised channel
IF-3.2(ix), 9.2-9.3 Notify NITDA of personal data breaches within 72 hours with the eight required details
IF-3.2(v)-(vii) Data protection by design, security improvement and an internal data protection policy
IF-3.2(viii), 4.2 Data protection impact assessments for high-impact processing
IF-3.2(x)-(xiii), (xv)-(xvi) Processor agreements updated and systems that make rights easy to exercise

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Nigeria Data Protection Regulation (NDPR) controls