GDPR / NDPR Compliance
Assess and improve privacy and security practices for personal data in line with GDPR and Nigeria's data protection requirements.
Our GDPR / NDPR Compliance service provides a structured approach tailored to your organization's environment, objectives, and risk priorities.
Our Service Methodology
- 1
Scoping & Planning
Define objectives, scope, stakeholders, systems, requirements, timelines, and success criteria.
- 2
Discovery & Assessment
Review the current environment, documentation, processes, technologies, dependencies, and existing controls.
- 3
Analysis & Prioritization
Identify weaknesses, risks, improvement opportunities, and priorities based on business context and impact.
- 4
Implementation & Remediation
Develop or implement agreed improvements, controls, processes, configurations, or documentation.
- 5
Validation
Review the implemented changes and validate that requirements and agreed security objectives are being addressed.
- 6
Reporting & Next Steps
Provide clear findings, deliverables, recommendations, priorities, and practical next steps.
What We Test
Data Protection Governance
Privacy governance, responsibilities, procedures, accountability, and documentation for personal data processing.
Data Processing & Data Flows
Collection, use, storage, transfer, sharing, retention, and deletion of personal data across relevant systems.
Security Controls
Access control, protection measures, incident response, privacy by design, data security, and supporting technical controls.
Data Subject & Regulatory Processes
Processes supporting data subject rights, breach response, records, requests, and regulatory obligations within scope.
Compliance & Standards
Compliance Support
- GDPR
- Nigeria Data Protection Act (NDPA)
Testing Standards
- Privacy-by-design principles
- Data protection risk assessment
- Information security best practices