Implement NDPC Compliance for Superjoes

Our logistics-tech platform gathers personal data at every touch-point: customers and riders inside the mobile apps, vendors and business partners in their dedicated portal, plus everyone who passes through the website, payment gateway or identity-verification service. That data ranges from basic contact details right up to NIN, BVN, bank accounts, registration certificates and tax information. I must bring the entire ecosystem into full alignment with the Nigeria Data Protection Act 2023 (NDPA) and all current NDPC regulations. The work spans secure collection, processing, storage and deletion; clear user consent flows; third-party processor oversight; and reliable KYC integration for NIN/BVN checks. When anyone asks to access, correct or erase their data, the request will route through customer-support email or phone and be actioned within statutory timelines, so a robust DSAR playbook is essential. Deliverables • Gap analysis report mapping our present state against NDPA and NDPC requirements • Comprehensive Data Protection Policy and Privacy Notice written in plain English • Procedural documents for data retention, breach response, vendor due-diligence and DSAR handling • Technical recommendations (and configuration guidance) covering encryption at rest/in transit, role-based access, audit logging and secure KYC integrations • Processor agreements and oversight checklist for identity-verification and payment providers • Training deck for staff and an executive summary for the board • Final compliance attestation package ready for NDPC inspection Acceptance criteria: every requirement within the NDPA/NDPC that applies to us is mapped to a policy, procedure or control; user requests submitted via email or phone are processed end-to-end in a test scenario within the mandated timeframe; encryption keys, access controls and audit logs are demonstrably active in pre-production. If you have hands-on experience navigating Nigerian data privacy law and can translate it into practical, auditable controls, I’m ready to move forward quickly.