Rights of Data Subjects

Hey there!

Welcome to another edition of Privacy Notes!

In today’s edition of Privacy Notes, we will be talking about the rights of Data Subjects as provided under the Nigeria Data Protection Regulation (NDPR). As we have explained several times before, a Data Subject is a natural person who can be identified, directly or indirectly by a reference made to an identification number or to factors specific to his physical, psychological, cultural or social identity. Simply put, a Data Subject is anyone who can be identified by his Personal Data which includes name, address, email address, phone number etc.

Due to the possibility as well as the risks which Personal Data is exposed to, Data Subjects are given several rights under the NDPR in order to ensure the safety and security of the Data Subject’s Personal Data. These rights include but are not limited to right to be informed, right to be forgotten, right to Personal Data portability, right to object to processing etc.

The right to be informed requires the Data Controller or Data Administrator to, prior to collecting Personal Data, provide certain information to the Data Subject. This information should be contained in a Privacy Policy that must be conspicuously included in the medium by which the Personal Data is being collected. This is a very important responsibility of the Data Controller or Data Administrator who must ensure that the Privacy Policy and its information must be expressed in clear and easily understandable language.

The Privacy Notice must, among other information, state:

  • the rights of the Data Subject;
  • the purpose and or lawful basis of the processing activity;
  • the technical methods used to collect and store Personal Data, for example, cookies, JWT, web tokens et.al.;
  • where there is one, the DPO’s contact details;
  • how long the Personal Data will be stored for;
  • the details of the supervisory authority, for example NITDA, to lodge complaints with if the Data Subject’s rights are infringed;

For more information on this, you can tune in to our podcast at www.ndpracademy.ng/podcast for detailed and in-depth discussion on the rights of Data Subjects.

On a side note, have you attended any of our NDPR Academy Classes? If you haven’t, then you should enroll for the Certified NDPR Academy Foundation Course which would give you further insight into what Data Protection entails, especially from the NDPR point of view. Perhaps, you have attended this class during our last series of classes in June 2020, I enjoin you to enroll for the NDPR Academy Certified Master Course (the Practitioner Course) as this would give you more detailed insights into Data Protection beyond the NDPR and from a broader and global perspective, with relevant case studies across the world. Basically, this Course gives you the wherewithal to take up Data Protection at a practice level.

The next set of NDPR Academy Classes would commence from September 18, 2020. You sure want to take advantage of the early bird offers. Feel free to visit our website at http://www.ndpracademy.ng for more details.

Thank you for reading to this point.

Till next week,

Uwemedimo Atakpo Jnr.

Leave a Reply

Your email address will not be published. Required fields are marked *