Compliance
NDPR Compliance Statement
Last updated: July 2026
The Personnel Management System is operated in alignment with the Nigeria Data Protection Regulation (NDPR) 2019 issued by the National Information Technology Development Agency (NITDA), and the Nigeria Data Protection Act, 2023.
Lawful basis
Processing of personnel data is carried out in the performance of a public task by the Federal Ministry of Defence, and where applicable, on grounds of legal obligation and legitimate interests of the Ministry in maintaining accurate service records.
Principles we apply
- Lawfulness, fairness and transparency — data is collected and used for clearly defined administrative purposes.
- Purpose limitation — records are not repurposed for uses incompatible with their original administrative purpose.
- Data minimisation — fields are limited to those required for personnel administration.
- Accuracy — a formal correction workflow allows records to be updated by authorised staff, with a full audit trail.
- Storage limitation — retention follows the Ministry's records-management policy.
- Integrity and confidentiality — role-based access, encryption in transit and at rest, and tamper-evident audit logging.
- Accountability — every action is attributable to a named, approved account.
Rights of data subjects
Personnel have the right to be informed about the data held on them, to request correction of inaccurate records, and, subject to service-record retention obligations, to object to processing outside the stated administrative purposes. Requests are made through the unit records officer.
Cross-border transfers
Personnel data is hosted within jurisdictions that maintain adequate data-protection safeguards recognised by NITDA. Transfers outside such jurisdictions are not made without appropriate legal safeguards.
Incident response
Suspected data-protection incidents must be reported through the channels described on the Report an Issue page. The Ministry maintains an internal incident response process aligned with NDPR breach-notification expectations.
