A training track for in-house privacy leads.
Eighteen hours of coursework, four assessments, one verifiable completion record.
Built for the work a DPO actually owns.
Structured lessons, labs, and assessment time.
One graded activity per curriculum track.
Hands-on records, reviews, and response drills.
Live and self-paced options for Nigerian teams.
Four tracks, modular by design.
The law, the regulator, the subject rights, and the lawful bases operators use every week.
- Controller and processor duties under the NDPA 2023
- Lawful basis selection for Nigerian product workflows
- Data subject rights intake, verification, and response limits
- When DPIAs, privacy notices, and processor contracts become mandatory
Scenario quiz plus lawful-basis mapping exercise.
How to run a repeatable privacy operating rhythm without turning every issue into a spreadsheet chase.
- RoPA hygiene and evidence ownership
- DPIA triage, reviewer assignment, and approval gates
- Breach drill roles, 72-hour clock, and communications log
- Board reporting cadence and monthly control checks
Build a 30-day DPO operating calendar and breach action log.
The product and security patterns a DPO needs to discuss confidently with engineering teams.
- Consent SDK events, preference centers, and audit trails
- Data minimisation, retention, and purpose limitation patterns
- Tenant isolation, RLS, and access review basics
- Webhooks, processor integrations, and evidence capture
Review a sample product flow and flag engineering privacy gaps.
What inspection readiness means in practice, and how to prove accountability quickly.
- NDPC inspection request anatomy
- Customer assurance questions and evidence rooms
- Vendor due diligence and transfer documentation
- Remediation plans, sign-off, and defensible audit trails
Prepare a regulator-facing evidence pack from a fictional inspection request.
The coursework produces usable work artifacts.
Operator exercises
Each lab asks the participant to create or review an artifact a privacy function would actually need: basis mapping, DPIA reviewer notes, breach records, and customer assurance material.
- Classify a processing activity and select a lawful basis
- Prepare a DPIA reviewer brief with open risks and owner actions
- Run a breach-response drill with the 72-hour notification clock
- Assemble a customer-ready trust evidence pack
Pick a cohort or self-pace.
- Cadence
- Tuesdays and Thursdays, 18:00 WAT
- Format
- Live remote labs, recordings, and office hours
- Capacity
- 40 seats
- Cadence
- Two evenings per week, 18:00 WAT
- Format
- Facilitated labs with peer review
- Capacity
- 50 seats
- Cadence
- Start any week
- Format
- Recorded lessons, workbook, and assessment submissions
- Capacity
- Unlimited
What you walk away with.
Shareable page with module status, assessment completion, issue date, and record hash. It is a training record, not a DPCO licence.
Participants leave with a RoPA sample, DPIA decision memo, breach action log, and vendor review checklist.
Short update drops when NDPC guidance, enforcement practice, or common customer assurance requests change.
Private operator channel and monthly office hours for Nigerian privacy teams working through live implementation questions.