PRIVACY POLICY
Nigerian Privacy Law Report (NPLR)
Effective Date: 8 June 2026
Last Updated: 8 June 2026
Publisher: Privacy Laboratory Initiative (“NPLR”, “we”, “us”, “our”)
1. INTRODUCTION
The Nigerian Privacy Law Report (NPLR) is committed to protecting your privacy and personal data. This Privacy Policy explains:
- What personal data we collect.
- How we use, store, and protect that data.
- Your rights under the Nigeria Data Protection Act (NDPA) 2023 and other applicable laws.
By accessing or using our Website and relating with us, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Website or use our products.
Important Note: The NPLR is a free, open-access law report publishing court judgments. Court judgments are public records. However, we take additional care to anonymise sensitive personal information where required by law or editorial policy.
2. WHO WE ARE
NPLR Publisher: Privacy Laboratory Initiative
Contact Email: editor@nigerianprivacylawreport.org
For the purposes of the NDPA 2023, we are a Data Controller for personal data collected directly from you (e.g., via contact forms, submissions). For judgments published on the Website, we act as a Data Processor of public records.
3. WHAT PERSONAL DATA WE COLLECT
We collect minimal personal data. The types of data depend on how you interact with the Website.
3.1 Data You Provide Voluntarily
| Interaction | Data Collected | Purpose |
|---|---|---|
| Contact form | Name, email address, message content | Respond to inquiries |
| Judgment submission form | Name, email address, organisation (optional), judgment file, case metadata | Process and publish judgments (with consent) |
| Newsletter sign-up (if offered) | Email address | Send updates and new case alerts |
| Sponsorship inquiry | Name, email address, organisation, phone number | Discuss sponsorship opportunities |
| Volunteer application | Name, email, CV/resume (may include professional history) | Evaluate volunteer applications |
3.2 Data from Published Judgments
Court judgments are public records. However, a judgment may contain personal data of non-parties (e.g., witnesses, children, medical patients). Where possible, we may:
- Anonymise (redact) names of non-party individuals.
- Redact medical or sensitive personal data not central to the legal issue.
- Clearly mark redactions as [REDACTED].
If you believe a judgment published on the NPLR contains your personal data that should not be public, please contact us (see Section 10).
4. HOW WE USE YOUR PERSONAL DATA
We use your personal data only for the purposes stated at the time of collection:
| Purpose | Legal Basis (NDPA 2023) |
|---|---|
| To respond to your inquiries | Legitimate interest / Consent |
| To process and publish judgment submissions | Consent (explicit) / Public interest |
| To send newsletters or updates | Consent |
| To improve Website functionality | Legitimate interest |
| To detect and prevent security threats | Legal obligation / Legitimate interest |
We do NOT:
- Sell your personal data to third parties.
- Use your data for automated decision-making or profiling.
- Share your data with advertisers.
5. COOKIES AND TRACKING TECHNOLOGIES
We may use essential cookies (necessary for Website operation) and analytics cookies (to understand usage).
| Cookie Type | Examples | Can You Disable? |
|---|---|---|
| Essential | Session cookies, security cookies | No (Website may not function) |
| Analytics | Google Analytics, Matomo | Yes (see Section 5.2) |
5.1 Third-Party Analytics
We may use Google Analytics or Matomo (open-source) to collect anonymised usage data. These services may set their own cookies. Google’s privacy policy.
5.2 Managing Cookies
You can control cookies through your browser settings:
- Chrome: Settings → Privacy and Security → Cookies and other site data
- Firefox: Options → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Cookies and website data
Disabling analytics cookies will not affect Website functionality.
6. DATA SHARING AND DISCLOSURE
We share your personal data only in limited circumstances:
| Recipient | Circumstances | Safeguards |
|---|---|---|
| Web hosting provider | To operate the Website | Data processing agreement (DPA) in place |
| Email service provider | To send newsletters (if you opt in) | DPA in place |
| Legal authorities | If required by law or court order | We will notify you unless prohibited |
| Professional advisors | For legal or technical advice | Confidentiality obligations |
We do not transfer personal data outside Nigeria unless:
- You have given explicit consent.
- The recipient country has adequate data protection laws (per NDPA Section 36).
- We have executed a legally binding data transfer agreement.
7. DATA STORAGE AND SECURITY
7.1 Retention Periods
| Data Type | Retention Period |
|---|---|
| Contact form inquiries | 12 months after last communication |
| Judgment submission data | Indefinite (as part of published law report) |
| Newsletter email addresses | Until you unsubscribe |
| Volunteer applications | 24 months |
| Website analytics (aggregated) | 26 months (Google Analytics default) |
7.2 Security Measures
We implement appropriate technical and organisational measures:
- Encryption:Â HTTPS (SSL/TLS) for all data transmission.
- Access controls:Â Only authorised personnel can access personal data.
- Regular backups:Â Encrypted backups stored securely.
- Vulnerability scanning:Â Periodic security checks.
However, no internet transmission is 100% secure. You use the Website at your own risk.
8. YOUR RIGHTS UNDER THE NDPA 2023
Under the Nigeria Data Protection Act 2023, you have the following rights:
| Right | What It Means |
|---|---|
| Right to access | Request a copy of personal data we hold about you. |
| Right to rectification | Correct inaccurate or incomplete data. |
| Right to erasure (right to be forgotten) | Request deletion of your data, subject to legal exceptions. |
| Right to restrict processing | Limit how we use your data while a complaint is resolved. |
| Right to data portability | Receive your data in a structured, machine-readable format. |
| Right to object | Object to processing based on legitimate interests. |
| Right to withdraw consent | Withdraw consent at any time (where processing is based on consent). |
How to Exercise Your Rights
Contact us at: editor@nigerianprivacylawreport.org
We will respond within 30 days. There is no fee for reasonable requests.
9. CHILDREN’S PRIVACY
Our Website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
10. THIRD-PARTY LINKS
Our Website may contain links to external sites (e.g., court websites, legal databases, partner organisations). We are not responsible for the privacy practices of those sites. Please review their privacy policies.
11. INTERNATIONAL VISITORS
The NPLR is based in Nigeria and complies with Nigerian law. If you access the Website from outside Nigeria, you are responsible for compliance with your local laws.
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. Material changes will be notified by:
- A banner on the Website.
- An email to subscribers (if we have your email address).
The “Last Updated” date at the top of this page will reflect the most recent version. Your continued use of the Website after changes constitutes acceptance of the revised policy.
13. COMPLAINTS
If you believe we have violated your privacy rights, you may:
- Contact us directly – we will investigate and respond within 30 days.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC):
We take all complaints seriously and will cooperate fully with the NDPC.
14. CONTACT US
For privacy-related inquiries, data subject requests, or complaints:
Email: editor@nigerianprivacylawreport.org
Postal Address: 12 Berkely Street, Lagos Island, Lagos
15. ACKNOWLEDGEMENT
By using the Nigeria Privacy Law Report website, you acknowledge that you have read, understood, and agreed to this Privacy Policy.