Who holds the data
Every MDA that issues a document, pays a salary, runs a hospital or builds a digital service is holding personal data on behalf of citizens. Under the Nigeria Data Protection Act 2023, that comes with duties — lawful collection, secure storage, controlled sharing and accountability.
- Collect only what is genuinely needed
- Use it only for the purpose it was given
- Store it securely and share it carefully
- Be able to show how and why it is processed