Nigeria Data Protection Regulation (NDPR) IF-3.2(v)-(vii): Data protection by design, security improvement and an internal data protection policy

Controllers must design and maintain systems to be data protection compliant, showing they are built with data protection in mind and continuously improving their information security architecture to prevent breaches, train staff, contractors, vendors and relevant third parties continuously, and develop and circulate an internal data protection strategy or policy telling staff and vendors the organisation's direction and the steps to follow.