NDPA Compliance Starter Kit for Nigerian Clinics, NGOs and SMEs

Editable policies, consent forms, breach plan and trackers, built on the NDPA 2023 and GAID 2025.

Holding patient files, beneficiary lists, customer phone numbers or staff records? Nigeria’s data protection law applies to you. Since 19 September 2025, the NDPA 2023 and the GAID 2025 have replaced the old NDPR, so templates built on the NDPR are out of date.

The NDPA Compliance Starter Kit gives you the working documents to get ready without paying a consultant for every page.

What you get (6 editable Word documents + 1 Excel workbook):

• Quick-Start Guide: the law in plain English, a “does this apply to me?” check, an obligations table and a 90-day roadmap
• Policy Templates: privacy notice, cookie notice, internal data protection policy, retention policy, acceptable use policy, staff checklist
• Consent and Rights Forms: patient, beneficiary, customer and photo consent, request form and response letters, complaints procedure
• Risk and Incident Toolkit: DPIA template, legitimate interest assessment, 72-hour breach plan with notification drafts, vendor and cross-border checklists
• Operations Pack: DPO appointment letter, semi-annual report, training programme with quiz, security schedule, audit preparation
• Sector Add-ons: chapters for clinics, NGOs and SMEs
• Compliance Workbook (Excel): 49-item readiness checklist, processing records, breach register with a 72-hour clock, request tracker, vendor register, training log and dashboard

Who it’s for: clinics and pharmacies, NGOs and community organisations, and SMEs and online sellers.

Please note: this is a template and guidance kit. It is not legal advice and does not guarantee compliance. I recommend a lawyer or licensed DPCO reviews your final documents. Version 1.0, November 2026.