Implement NDPC Compliance for Superjoes
Budget / Salary$10–30
TypeFreelance project
LocationRemote
Posted1 hour ago
Our logistics-tech platform gathers personal data at every touch-point: customers and riders inside the mobile apps, vendors and business partners in their dedicated portal, plus everyone who passes through the website, payment gateway or identity-verification service. That data ranges from basic contact details right up to NIN, BVN, bank accounts, registration certificates and tax information. I must bring the entire ecosystem into full alignment with the Nigeria Data Protection Act 2023 (NDPA) and all current NDPC regulations.
The work spans secure collection, processing, storage and deletion; clear user consent flows; third-party processor oversight; and reliable KYC integration for NIN/BVN checks. When anyone asks to access, correct or erase their data, the request will route through customer-support email or phone and be actioned within statutory timelines, so a robust DSAR playbook is essential.
Deliverables
• Gap analysis report mapping our present state against NDPA and NDPC requirements
• Comprehensive Data Protection Policy and Privacy Notice written in plain English
• Procedural documents for data retention, breach response, vendor due-diligence and DSAR handling
• Technical recommendations (and configuration guidance) covering encryption at rest/in transit, role-based access, audit logging and secure KYC integrations
• Processor agreements and oversight checklist for identity-verification and payment providers
• Training deck for staff and an executive summary for the board
• Final compliance attestation package ready for NDPC inspection
Acceptance criteria: every requirement within the NDPA/NDPC that applies to us is mapped to a policy, procedure or control; user requests submitted via email or phone are processed end-to-end in a test scenario within the mandated timeframe; encryption keys, access controls and audit logs are demonstrably active in pre-production.
If you have hands-on experience navigating Nigerian data privacy law and can translate it into practical, auditable controls, I’m ready to move forward quickly.
The work spans secure collection, processing, storage and deletion; clear user consent flows; third-party processor oversight; and reliable KYC integration for NIN/BVN checks. When anyone asks to access, correct or erase their data, the request will route through customer-support email or phone and be actioned within statutory timelines, so a robust DSAR playbook is essential.
Deliverables
• Gap analysis report mapping our present state against NDPA and NDPC requirements
• Comprehensive Data Protection Policy and Privacy Notice written in plain English
• Procedural documents for data retention, breach response, vendor due-diligence and DSAR handling
• Technical recommendations (and configuration guidance) covering encryption at rest/in transit, role-based access, audit logging and secure KYC integrations
• Processor agreements and oversight checklist for identity-verification and payment providers
• Training deck for staff and an executive summary for the board
• Final compliance attestation package ready for NDPC inspection
Acceptance criteria: every requirement within the NDPA/NDPC that applies to us is mapped to a policy, procedure or control; user requests submitted via email or phone are processed end-to-end in a test scenario within the mandated timeframe; encryption keys, access controls and audit logs are demonstrably active in pre-production.
If you have hands-on experience navigating Nigerian data privacy law and can translate it into practical, auditable controls, I’m ready to move forward quickly.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.