What is the NDPR and why does it matter for schools?

NDPR for Schools

The NDPR (issued by NITDA) applies to all organisations that process personal data of Nigerians — including schools.

Key Obligations

1. Get written consent from parents before collecting data
2. Only collect what you actually need
3. Password-protect all systems storing student records
4. Report data breaches to NITDA within 72 hours
5. Honour parent requests to delete their child's data

Practical Steps

• Create a simple data protection policy
• Password-protect all computers with student records
• Stop sharing student lists via unencrypted WhatsApp