The NDPA Compliance Starter Kit gives you the policies, consent forms, risk assessments, breach plan and trackers you need, written for Nigerian clinics, NGOs and SMEs and ready to edit.
Get the kit₦10,000 one-time · 6 editable Word documents + 1 Excel workbook · instant download
The Nigeria Data Protection Act 2023 is now supported by the NDPC’s General Application and Implementation Directive (GAID), which took effect on 19 September 2025 and replaced the old NDPR. If your privacy policy still cites the NDPR, it is out of date.
If you hold patient files, beneficiary lists, customer phone numbers or staff records, the law applies to you. For clinics, NGOs and online sellers it asks for more: written DPIAs, consent records, vendor agreements, staff training and 72-hour breach reporting.
This kit turns those duties into documents you can fill in this week.
Seven files, about 80 pages of templates plus an 11-sheet workbook.
The law in plain English, a five-step “does this apply to me?” check, your obligations table and a 90-day roadmap.
Privacy notice, cookie notice, internal data protection policy, retention policy, acceptable use policy and a one-page staff checklist.
Patient, beneficiary, customer and photo consent forms, a request form with response letters, and a complaints procedure.
DPIA template, legitimate interest assessment, a 72-hour breach response plan with notification drafts, and vendor and cross-border checklists.
DPO appointment letter and terms of reference, semi-annual report, staff training programme with quiz, security schedule and audit preparation.
Separate chapters with checklists for clinics, NGOs and SMEs, including field-data and CCTV guidance and sample notice wording.
49-item readiness checklist, processing records, breach register with a 72-hour clock, request tracker, vendor register, training log and a live dashboard.
Health data is sensitive and DPIAs are mandatory. Get patient consent forms, front-desk rules and records controls.
Handle vulnerable people’s data, field collection, donor sharing and photos with consent scripts and safeguards.
Fix marketing consent, cookie banners, CCTV, vendor contracts and staff data without a legal department.
Every template points to the GAID article behind it, so you can check the source. We read the GAID itself, not just summaries, and the guide shows you where to confirm points that depend on current NDPC notices, such as your registration tier.
Salisu Haruna is an IT manager with more than six years’ experience running information systems for multi-site organisations in Nigeria, including MIS and ERP, Microsoft 365 administration, health information systems and data protection practice. He built this kit to give smaller organisations practical tools that match the NDPA and GAID.
One-time payment · instant download
No. It is a template and guidance kit. Have a qualified data protection lawyer or licensed DPCO review your final documents.
Yes. They are Word and Excel files. Replace the yellow placeholders with your own details and delete the guidance notes.
Only if you are a data controller or processor of major importance. The Quick-Start Guide walks you through the check and tells you where to confirm your tier.
No. The SME chapter has a lean 30-day plan, and you can skip templates that don’t apply to you.
No. The NDPR no longer applies. The kit is built only on the NDPA 2023 and the GAID 2025.