NDPR & NDPA 2023 Compliance
Nigeria Data Protection Act 2023 (NDPA) and NDPR Regulatory Statement for Teckwik Mobility Infrastructure Ltd.
Statutory Commitment to Nigerian Data Sovereignty
T-Mobility operates in strict compliance with the Nigeria Data Protection Act 2023 (NDPA) enacted by the National Assembly, overseen by the Nigeria Data Protection Commission (NDPC), and the Nigeria Data Protection Regulation (NDPR). We recognize that data subjects in Nigeria possess inalienable constitutional rights to privacy and protection of their personal records.
1. Principles of Lawful Processing
In accordance with Section 24 of the NDPA 2023, all personal data processed by T-Mobility adheres to six bedrock principles:
Data is collected only on lawful grounds (contractual performance, user consent, vital safety interests, or legal obligation) without deception or unfair coercion.
Personal and spatial telemetry data is collected specifically for ride dispatching, route navigation, and safety verification. Never reused for unrelated commercial profiling.
We collect only what is strictly adequate, relevant, and necessary. We do not demand extraneous biometric or device permissions not required for the transport journey.
We provide intuitive tools inside rider and driver apps allowing instant updates to telephone numbers, vehicle credentials, and payment methods.
Data is retained only as long as necessary. Historical trip telemetry is periodically anonymized and stripped of personal identifiers once audit windows expire.
Protected against unauthorized access, accidental loss, or destruction through TLS 1.3 in transit and cryptographic hashing at rest in high-security databases.
2. Rights of Data Subjects Under NDPA 2023
As a T-Mobility user or partner in Nigeria, you are entitled to exercise the following statutory rights free of charge:
- Right to Confirmation & Access (Section 34) You have the right to request a full, structured copy of all personal records and trip logs held by T-Mobility relating to your identity.
- Right to Rectification (Section 35) You may correct inaccurate or incomplete data, including updated driver's licenses, phone numbers, or vehicle registration.
- Right to Erasure / Right to be Forgotten (Section 36) You may request the complete deletion of your account and personal records when the data is no longer necessary for the purposes for which it was collected.
- Right to Object to Automated Profiling (Section 37) You have the right not to be subjected to decisions based solely on automated processing without human review where it produces significant legal effects.
- Right to Data Portability (Section 38) You may request your trip receipts, payment history, and rating records in an industry-standard machine-readable format (JSON or CSV).
3. Regulatory Auditing & Breach Response
Annual Compliance Audit: In compliance with NDPC guidelines, T-Mobility conducts an annual independent data protection audit performed by a licensed Data Protection Compliance Organization (DPCO) and files compliance certificates with the Nigeria Data Protection Commission.
72-Hour Breach Notification: In the unlikely event of a security incident that impacts personal data integrity or confidentiality, T-Mobility's technical response team will notify the NDPC and affected individuals within 72 hours of becoming aware of the breach, alongside mitigation guidance.
Office of the Data Protection Officer (DPO)
To file a Subject Access Request (SAR), request account erasure, or escalate a privacy concern directly to our legal compliance unit:
Email: dpo@tmobility.ng
Teckwik Mobility Infrastructure Ltd
Lagos & Abuja, Nigeria
Nigeria Data Protection Commission (NDPC)
Web: https://ndpc.gov.ng
Abuja, Federal Capital Territory