PRIVACY POLICY, DATA PROTECTION & CONFIDENTIALITY POLICY
1. INTRODUCTION
CHIKAT SOLUTIONS & TECHNOLOGIES LTD (“the Company”) is committed to protecting the privacy, confidentiality, integrity, and security of all personal information collected during National Identity Number (NIN) enrollment, modification, verification, and other data capture activities conducted on behalf of the National Identity Management Commission (NIMC).
This Privacy Policy and Data Protection Policy establishes the framework through which the Company collects, processes, stores, transmits, protects, and manages personal data in compliance with:
The Nigeria Data Protection Act (NDPA) 2023
Nigeria Data Protection Commission (NDPC) Regulations
National Identity Management Commission (NIMC) Guidelines
Applicable Cybersecurity and Data Protection Laws in Nigeria
The Company recognizes the importance of safeguarding the personal information of all applicants and undertakes to ensure that all personal data handled by the Company is treated lawfully, fairly, confidentially, and securely.
This Policy applies to:
All staff, agents, consultants, and contractors of the Company
All NIN enrollment and modification activities
All biometric and demographic data captured by the Company
All devices, systems, software, databases, and communication channels used for data processing
3. TYPES OF DATA COLLECTED
The Company may collect and process the following categories of personal information during NIN enrollment and related operations:
Full Name
Date of Birth
Gender
Residential Address
State/LGA of Origin
Nationality
Telephone Number
Email Address
Occupation
C. Supporting Documentation
4. PURPOSE OF DATA COLLECTION
Personal data collected by the Company shall be used solely for lawful and authorized purposes including:
National Identity Number (NIN) enrollment
Identity verification
Modification and correction of NIN records
Transmission of enrollment data to NIMC
Compliance with legal and regulatory obligations
Prevention of fraud and identity theft
The Company shall not process personal information for unauthorized or unlawful purposes.
5. LEGAL BASIS FOR PROCESSING
The Company processes personal data based on:
Consent of the data subject
Legal obligations under Nigerian law
Public interest obligations relating to national identity management
Contractual obligations with NIMC and relevant authorities
6. DATA PROTECTION PRINCIPLES
The Company shall ensure that personal data is:
Collected lawfully and transparently
Used only for specified lawful purposes
Accurate and up to date
Adequately protected against unauthorized access
Stored securely
Retained only for authorized periods
Processed with confidentiality and accountability
7. DATA SECURITY MEASURES
The Company shall implement appropriate technical and organizational security measures including:
Password-protected systems
Restricted access to enrollment devices
Secure transmission of data
Staff confidentiality obligations
Anti-virus and cybersecurity protection
Controlled access to physical records and equipment
Periodic monitoring and security assessments
Only authorized personnel shall have access to personal information collected during enrollment operations.
8. CONFIDENTIALITY OBLIGATIONS
All employees, agents, and contractors engaged by the Company shall:
Maintain strict confidentiality regarding all applicant information
Refrain from unauthorized disclosure of personal data
Use collected information strictly for official purposes
Sign confidentiality and non-disclosure undertakings where necessary
Any breach of confidentiality may result in disciplinary action, termination, and possible legal prosecution.
9. DATA SHARING AND DISCLOSURE
The Company shall not sell, lease, exchange, or unlawfully disclose personal information to third parties.
Personal data may only be shared:
With NIMC
With authorized government agencies where legally required
Pursuant to a valid court order
For lawful regulatory compliance purposes
The Company shall retain personal information only for the duration authorized by NIMC and applicable laws.
Where retention is no longer necessary, records shall be securely deleted, destroyed, or anonymized in accordance with applicable regulations.
11. RIGHTS OF DATA SUBJECTS
Subject to applicable laws and NIMC regulations, data subjects may have the right to:
Request access to their personal data
Request correction of inaccurate information
Withdraw consent where applicable
Lodge complaints regarding misuse of personal data
Request lawful review of data processing activities
In the event of any data breach, unauthorized disclosure, or cybersecurity incident, the Company shall:
Investigate the incident immediately
Mitigate potential harm
Notify relevant authorities where required
Implement corrective measures to prevent recurrence
13. EMPLOYEE RESPONSIBILITIES
All staff involved in enrollment operations shall:
Handle applicant data responsibly
Follow approved operational procedures
Protect enrollment equipment from misuse
Avoid unauthorized copying or transmission of applicant information
Report any suspicious activities immediately
This Policy may be reviewed periodically to ensure compliance with evolving laws, NIMC operational requirements, and industry best practices.
CONSENT CLAUSE FOR NIN APPLICANTS
I hereby voluntarily consent to the collection, processing, storage, transmission, and use of my personal and biometric information by CHIKAT SOLUTIONS & TECHNOLOGIES LTD for the purpose of National Identity Number (NIN) enrollment, verification, modification, and related identity management services in accordance with applicable Nigerian laws and NIMC regulations.
I understand that my information shall be treated confidentially and used strictly for lawful and authorized purposes.
Applicant Name: ______________________________________________
Applicant Signature: ___________________________________________
Date: ________________________________________________________
Prepared By:
Name: _______________________________________________________
Title/Position: _______________________________________________
Signature: ___________________________________________________
Date: _______________________________________________________
For and on behalf of:
CHIKAT SOLUTIONS & TECHNOLOGIES LTD
Official Stamp/Seal:
