Privacy Policy

1. Scope and Application

This Privacy Policy applies to all individuals and entities who access or use the NSCDC Guard Management Portal, including but not limited to:

• NSCDC personnel
• Private Guard Companies (PGCs)
• Security guards
• Training centres
• Other authorised stakeholders

By accessing or using the Portal, you acknowledge that you have read, understood, and agreed to the processing of your Personal Data in accordance with this Policy.

2. Definitions (NDPR Aligned)

3. Categories of Personal Data Collected

NSCDC collects only Personal Data that is adequate, relevant, and limited to what is necessary for official, regulatory, and security purposes.

4. Purpose of Processing

Personal Data collected through the Portal is processed strictly for lawful and official purposes, including:

• Registration, verification, and profiling of guards, PGCs, and training centres
• Regulatory supervision and compliance enforcement
• Processing and management of guard deployment and special guard requests
• Licensing, certification, renewal, and record management
• Monitoring, auditing, and reporting of private security operations
• National security coordination and operational planning
• System administration, security, and performance improvement
• Compliance with legal, regulatory, and statutory obligations

5. Legal Basis for Processing (NDPR)

NSCDC processes Personal Data on one or more of the following lawful bases:

• Performance of a statutory or public duty under Nigerian law
• Compliance with legal and regulatory obligations
• Performance of tasks carried out in the public interest
• Consent of the Data Subject, where applicable

6. Data Sharing and Disclosure

NSCDC does not sell, trade, or commercially exploit Personal Data.

Personal Data may be disclosed only:

• To authorised NSCDC departments and personnel
• To relevant government institutions or regulators as required by law
• To law enforcement agencies for security, investigation, or legal purposes
• Where disclosure is required by a court order or applicable legislation

All disclosures are subject to strict confidentiality, access control, and security safeguards.

7. Data Security Measures

NSCDC implements appropriate technical, organisational, and administrative measures to safeguard Personal Data against:

• Unauthorised or unlawful access
• Accidental loss, destruction, or damage
• Misuse, alteration, or disclosure
• Cybersecurity threats

Access to Personal Data is limited strictly to authorised personnel on a need-to-know basis.

8. Data Retention and Disposal

Personal Data is retained only for as long as necessary to:

• Fulfil regulatory, security, and operational requirements
• Comply with applicable legal and statutory obligations
• Support audits, investigations, and national security functions

Upon expiration of the retention period, data is securely archived or destroyed in accordance with applicable laws and internal policies.

9. Data Subject Rights (NDPR)

Subject to applicable laws and security considerations, Data Subjects have the right to:

• Request access to their Personal Data
• Request correction of inaccurate or incomplete data
• Request restriction or objection to processing, where applicable
• Lodge a complaint with NSCDC or the Nigeria Data Protection Commission (NDPC)

Requests may be subject to identity verification and lawful limitations.

10. Cookies and Similar Technologies

The Portal may use cookies and similar technologies to:

• Maintain secure user sessions
• Improve functionality and user experience
• Monitor system usage and performance

Users may manage cookie preferences through their browser settings; however, disabling cookies may affect certain features of the Portal.

11. Third-Party Links

The Portal may contain links to third-party websites or services. NSCDC is not responsible for the privacy practices, content, or security of external platforms. Users are encouraged to review third-party privacy policies independently.

12. Children and Minors

The Portal is intended solely for official and professional use. NSCDC does not knowingly collect or process Personal Data of individuals under the age of 18.

13. Data Protection Officer (DPO)

NSCDC has appointed a Data Protection Officer (DPO) in accordance with the NDPR to oversee data protection compliance and respond to data protection inquiries.

The DPO is responsible for:

• Monitoring compliance with NDPR and applicable data protection laws
• Advising on data protection obligations and best practices
• Handling Data Subject requests and complaints
• Liaising with the Nigeria Data Protection Commission (NDPC)

14. Changes to This Privacy Policy

NSCDC reserves the right to amend or update this Privacy Policy at any time to reflect:

• Changes in data protection laws or regulations
• Operational or system enhancements
• Security or governance improvements

Revisions will be published on the Portal with an updated effective date.

15. Contact Information

For privacy-related inquiries, Data Subject requests, or complaints, please contact: