–  Compliant data transfer inside and outside Nigeria. We can advise on how to transfer information internationally in compliance with National Information Technology Development Agency (NITDA) and Attorney General of the Federation approval and or by using, for example, the standard contractual clauses, binding corporate rules, consent-based transfers or adequacy self-assessment or how to transfer data

–  Data retention audits and policies. We can carry out company-wide assessments of an organisation’s data retention needs by designing retention questionnaires; interviewing staff; reviewing current policies and procedures; and compiling compliance reports. We can also draft data retention schedules to help ensure ongoing compliance on a practical level.

–  Compliant e-privacy and direct marketing campaigns. We can advise on how best to exploit your customer databases without breaching the raft of complex legislation (including the Data Protection Act and the Privacy & Electronic Communications Regulations) that governs these activities.

–  Fair collection statements, website privacy policies and health checks. We can draft or review fair processing information/data collection statements and privacy policies, as well as reviewing data collection forms and methods of obtaining compliant opt-in and opt-out consents.

– Data breach management. We can: o Assist with regulatory investigations by National Information Technology Development Agency (NITDA) and or UK Information Commissioner and other regulatory bodies concerning data protection and data security breaches and minimise the risk of enforcement action.  Advise on data protection breach management generally, including drafting data breach reports and submissions to the Information Commissioner’s Office (ICO) and others.

–  Data protection policies, handbooks and employment documentation. We can draft and review data protection policies and procedures to ensure compliance with the legislation and best practice where appropriate.

–  Data-processing agreements. Where you are a data controller in relation to personal data held and you decide to appoint a data processor to carry out certain business functions for you (for example, payroll activities, contractors, call centres, mailing houses, debt collectors, etc.), you are required by law to have a written agreement in place with that processor. This agreement should set out certain key provisions. We can assist in drafting stand-alone agreements, clauses for insertion into your main agreement or side letters where existing contractual arrangements are already in place.

–  Handling of subject access requests and complaints. We can assist with the handling of subject access requests and complaints in relation to data-processing activities.

–  Data protection and information security. We can advise and or assist on issues related to information security from a technical and non-technical IT perspective, particularly in the context of new technologies and ways of working, such as cloud computing and bring your own device (BYOD) systems.

–  Changes required by the GDPR. We can advise on the changes involved in the NDPR and GDPR carry out a gap analysis for organisations that want to understand how well they meet the new compliance measures that are required under the NDPR and GDPR.

–  Data protection helpline. We are happy to discuss provision of a fixed-cost data protection helpline service to assist you with your day-to-day data protection queries.

–  Training on data protection law.

We can advice and assist on all other data protection projects and matters including:

1.  Advising on data protection issues associated with any new business projects.
2.  Procurement of systems that are compliant with data protection legislation.
3.  Participating in or engaging with big data and data analytics projects.
4. Carrying out PIAs.
5. Advising on data protection issues in contracts and in corporate transactions