NITDA Issues Guidelines for the Management of Personal Data by Public Institutions

NATIONAL Information Technology Development Agency (NITDA), has issued

Guideline for Management of Personal Data by Public Institutions in Nigeria.

The Guidelines are issued as supplementary regulation to the Nigeria Data Protection Regulation (NDPR),2019.

Mallam Inuwa Kashifu Abdullahi, director general, National Information Technology Development Agency (NITDA), stated this in a statement issued by Mrs Hadiza Umar, Head, Corporate Affairs and External Relations, NITDA.

“The Guideline stipulates the requirements for the processing of personal data by Public Institutions in Nigeria.

“It is issued to reinforce the implementation of the NDPR. All the principles and provisions of the NDPR remain valid and applicable to all Nigerians including public institutions,” Mallam Abdullahi stated.

He further explained that the Guideline requires all public institutions and any entity co-owned by the Government to process all personal data of Nigerians and Data Subjects in Nigeria in line with best practices and in conformity with the highest standards.

According to him, “It takes cognisance of the fact that some public sector data processing may be founded on Vital or Public interest. “This position of trust therefore requires public data controllers and processors to apply the highest ethical and professional standards in processing such data.

“It also mandates the use of secure technology and automated processes for personal data by Public Institutions, in line with the requirements of the National Digital Economy Policy and Strategy, championed by Dr Isa Ali Ibrahim (Pantami), the Honourable Minister of Communications and Digital Economy.

“NITDA’s issuance of a public-sector specific Guideline is another trailblazing effort made in consonance with the emerging global data regulatory models.”

Mallam Abdullahi also stated that all Public Institutions holding or processing personal data are required to securely digitize all personal databases within 60 days from the issuance of the Guidelines.

Similarly, all such public institutions are required to maintain the highest level of information security to guarantee confidentiality, integrity, availability and resilience of all databases within their control.

“NITDA recognizes the need for collaboration in some cases between the public and private sector to tackle emergencies or other state-led interventions for the benefit of citizens.

“Therefore, the Guideline provides a strict framework for these types of collaborations to ensure that the privacy of Nigerians is not unduly infringed.

“The COVID-19 pandemic, for example, has brought up the need for more personal data use to limit the spread of the virus.

“While we recognise the existence of constitutional limitations on privacy rights in the interest of public health and safety, yet such limitations must be based on defined frameworks.