NDPA modules · People
A person is not an account. They are everywhere at once.
Halima Sani appears in five of your systems, three of your activities, and one open objection. When she asks what you hold, this is the answer — assembled, not searched for.
- Halima Sani, PER-0117. Customer since Mar 2023.
- Core banking: Oracle Flexcube · Nigeria.
- Marketing email: Mailchimp · still sending. The withdrawal never reached this system.
- Support: Zendesk · 31 tickets.
- Backups: S3 · 90-day copies.
- Payments: Paystack · Nigeria.
The gap the person view exposes
She took back her permission thirty-six days ago and is still on the list
Your consent register is correct: withdrawal recorded, dated, stored. The failure is that nothing carried it into the system that sends the email. Two records, both true, and a person still being marketed to.
No register catches this on its own. It only appears when one person’s records are put side by side — which is what this module is for.
4 Mar 2023
She agreed to marketing emails
Recorded at sign-up with the wording she was shown, which is what makes the consent provable rather than asserted.
22 Jun 2026
She took it back
One click in the app. The consent register updated in the same second and shows the withdrawal correctly.
22 Jun 2026
Nothing told Mailchimp
No integration carried the withdrawal outward. The audience list was never touched, and no error was raised anywhere.
Today · day 36
She is still in the audience
Two campaigns have gone out since. Asiri found this by comparing her consent record against the Mailchimp audience it reads hourly.
Six people, six different problems
Every one of these is a filing risk with a name on it
Not a dashboard of counts. Six real records from the register, each one a specific thing you would have to explain to the NDPC if they asked about that person.
Halima Sani
PER-0117- Consent withdrawn
- Objection open
Withdrew marketing consent 36 days ago and is still in the Mailchimp audience. Also has an open objection to fraud screening.
5 systems · 3 activities · 1 open requestChinedu Okafor
PER-0114- Request late
- In arrears
Asked for everything you hold 36 days ago. Part of it sits in a collections agency spreadsheet no export reaches.
6 systems · 4 activities · 1 incidentTobi Ajayi
PER-0308- Under 18
- Marketed to
Stated age 16 at agent sign-up. No parental consent is held, and he is on the marketing list because nothing screens it by age.
3 systems · 2 activitiesZainab Yusuf
PER-0120- Decided by a model
A model declined her and she has objected to a machine deciding. The appeal route the assessment promised is still only planned.
3 systems · 2 activities · 1 open requestAdaeze Nwosu
PER-0131- Erasure open
- Account closing
Wants everything deleted. Most of it you must keep for seven years, making this a partial refusal you have to explain in writing.
3 systems · 3 activitiesEmeka Obi
PER-0128- Agent
- App monitored
- Unsafeguarded transfer
One of 3,100 agents whose app events go to the United States with no safeguard, and who has never been told that happens.
3 systems · 2 activities
What this record refuses to be
A compliance tool should not become the richest profile you own
The person view holds links to your systems, never copies of what is inside them. It can tell you Mailchimp holds her open history; it does not keep a second copy of that history here. Building one would create exactly the concentration the Act exists to prevent.
It does not copy what your systems hold
The record names the system and the field. Reading the contents means going to the source, with that access logged.
It does not infer anything about anyone
No scores, no segments, no derived attributes. Everything shown was read from a system or written by a named person.
It does not build a cross-client picture
The same person can appear at two clients of ours. The two records never meet, and no Asiri employee can query across them.
It does not hide who looked
Every open of a person record is logged, including by your auditor and by us. That log is in the register you can read.
Look up one customer and see what you actually hold
It takes about four seconds, and it is the demo that changes most people's minds about whether their registers are true.