<!-- wp:image {"id":126,"width":567,"height":340} -->
<figure class="wp-block-image is-resized"><img src="http://nethostnigerialimited.ng/wp-content/uploads/2019/12/cybersecurity-750x450.jpg" alt="" class="wp-image-126" width="567" height="340"/></figure>
<!-- /wp:image -->

<!-- wp:paragraph -->
<p><strong>We provide Data Protection Compliance
Implementation, Registration with Applicable authorities&nbsp; Training at all cooperate levels</strong></p>
<!-- /wp:paragraph -->

<!-- wp:heading -->
<h2><strong>Nigeria Data Protection Regulation (NDPR)</strong></h2>
<!-- /wp:heading -->

<!-- wp:paragraph -->
<p>The National Information Technology
Development Agency (NITDA) is statutorily mandated by the NITDA Act of 2007 to
develop regulations for electronic governance and monitoring of the use of
information technology and electronic data. </p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>Conscious of the concerns around privacy
and protection of Personal Data and the grave consequences of leaving Personal
Data processing unregulated, NITDA has issued the Nigeria Data Protection
Regulation (NDPR). The objectives of the regulation are as follows:</p>
<!-- /wp:paragraph -->

<!-- wp:list -->
<ul><li>to safeguard the rights of
natural persons to data privacy;</li><li>to foster safe conduct for
transactions involving the exchange of Personal Data;</li><li>to prevent manipulation of
Personal Data; and</li><li>to ensure that Nigerian
businesses remain competitive in international trade through the safe-guards
afforded by a sound data protection regulation.</li></ul>
<!-- /wp:list -->

<!-- wp:paragraph -->
<p>The regulation applies to all storage and
processing of Personal Data conducted in respect of Nigerian citizens and
residents.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>Reference - <a href="https://nitda.gov.ng">https://nitda.gov.ng</a></p>
<!-- /wp:paragraph -->

<!-- wp:heading -->
<h2><strong>European General Data Protection Regulation (GDPR)</strong></h2>
<!-- /wp:heading -->

<!-- wp:paragraph -->
<p>Thinking
that the GDPR is not your issue because your organization doesn’t have a
presence in Europe? Well, think again! If you offer any products or services to
the European market, or if you collect data on European customers, the new
privacy rules apply to you.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>The EU General Data Protection Regulation (GDPR)
was adopted in April 2016 and will take effect across the European Union (EU)
on 25 May 2018, when it supersedes the 28 current national data protection laws
based on the 1995 Data Protection Directive (DPD).</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>Introduced to keep pace with the modern digital
landscape, the purpose of the new Regulation is twofold: </p>
<!-- /wp:paragraph -->

<!-- wp:list -->
<ul><li>to improve consumer confidence in organisations
that hold and process their personal data by reinforcing their privacy and
security rights consistently across the EU, and </li><li>to simplify the free flow of personal data in
the EU through a coherent and consistent data protection framework across the
member states.</li></ul>
<!-- /wp:list -->

<!-- wp:paragraph -->
<p>GDPR applies to both the controller and processor processing of personal data. The Regulation will become relevant for companies as soon as any data processing takes place.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>

Reference- <a href="https://ec.europa.eu/info/law/law-topic/data-protection_en">https://ec.europa.eu/info/law/law-topic/data-protection_en</a></p>
<!-- /wp:paragraph -->

<!-- wp:heading -->
<h2><strong>Payment Card Industry Data Security Standard (PCI DSS) Certification </strong></h2>
<!-- /wp:heading -->

<!-- wp:paragraph -->
<p>Payment Card Industry (PCI) Data Security Standard (DSS) is a standard that has evolved from the effort of several card brands such as Visa and American Express. The standard was developed to improve the security of payment card information. PCI DSS as a standard has been validated by other card brands. </p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p> The PCI Council which is responsible for the publication and updating of PCI DSS requirements consists of the main payment card international brands and companies. </p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p> To fall within the scope of PCI DSS, a merchant/acquiring bank needs to process, transmit or store payment card details.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p> PCI DSS is a security standard and the card schemes (Visa, Master Card and others) are the promoters and enforcers of the standard on behalf of the community of participants. The card schemes enforce compliance and fine acquiring banks for not being compliant. Alternatively, the card schemes may proactively fine acquiring banks for slow progress towards the compliance of PCI DSS requirements. Acquiring banks that fall within the scope of PCI DSS must comply with a series of requirements. </p>
<!-- /wp:paragraph -->