Had a breach?Request a consultation

Protecting data. Strengthening security. Enabling responsible technology.

SafeDaTech helps organisations in Nigeria protect personal information, strengthen cybersecurity, set up sound data governance and use artificial intelligence responsibly.

A consultant at a desk reviewing a printed checklist beside her laptop
Good governance starts with the person at the keyboard. Illustrative image, AI generated.

Before you paste it into AI, ask.

Most organisations already use AI, often through personal accounts that nobody has approved. We help you see where it is used, decide what is allowed, protect the information that goes into it, and train your people to get real value from it.

We do not just teach people how to use AI. We help organisations use it correctly, ethically, securely and productively.

Try it: is this safe to put into a public AI tool?

Fine with an approved tool

Public information carries no personal or confidential data.

A simplified example. Your own policy decides the final answer.

  1. 1

    See it

    An inventory of the AI tools staff already use and the data they put into them.

  2. 2

    Set the rules

    An acceptable use policy and plain guidelines for each role.

  3. 3

    Protect the data

    Privacy and security checks on the tools you approve.

  4. 4

    Train the people

    Workshops for executives, HR, finance, educators, NGO staff and developers.

The right way and the wrong way to use AI

The same task, done two ways. The difference is what goes into the tool and who checks what comes out.

The wrong way

Summarise this complaint from Amina Bello, BVN 22219834471, phone 0803 412 7788, about her loan, and draft a reply.

Personal data sent to a public AI tool. This may breach the NDPA.

The right way

Summarise this complaint from Customer A about a delayed loan refund and draft a polite reply. No account details included.

No personal data shared. Approved tool. A person checks the reply before it is sent.

Use AI rightly

  • Use the AI tools your organisation has approved
  • Remove names, ID numbers and account details first
  • Check facts, figures and sources before you rely on them
  • Keep a person responsible for decisions about people
  • Say when content was drafted with AI where it matters

Avoid these mistakes

  • Paste customer, patient, student or beneficiary records
  • Share passwords, contracts or confidential strategy
  • Publish or send AI output without reading it
  • Let AI alone decide on loans, jobs or services
  • Use personal AI accounts for work data

Five practices built around the people who handle your data

Data protection and privacy

We map the personal data you hold, close the gaps against the NDPA and GAID 2025, and write the notices, policies and procedures your staff will actually follow.

NDPA readiness and gap assessment, Data inventory, data mapping and records of processing, Privacy notices, data protection policy and retention schedule, Data processing agreements and third party privacy reviews, Data protection impact assessments.

Cybersecurity and information security

We assess how information is protected across people, processes and systems, then set out policies, access controls and response plans in proportion to your risk.

Cybersecurity risk assessment, Information security policies and procedures, Network and endpoint security review, Incident response, business continuity and recovery planning, Staff security awareness training.

Data governance and information management

We set up ownership, classification, retention and access rules so information stays accurate, findable and protected from creation to disposal.

Data classification scheme, Retention and disposal schedule, Records management and digital archiving, Data ownership and stewardship roles, Access reviews and database governance.

Technology risk and compliance

We build technology risk registers, review suppliers and give leadership a clear view of where technology exposes the organisation.

IT governance review, Technology risk register, Third party and vendor risk assessments, Technology due diligence for procurement, Governance and policy frameworks.

AI governance and responsible AI

We find out how AI is already used in your organisation, write an acceptable use policy, assess tools for privacy and security risk, and train staff to use AI well.

AI use inventory, AI acceptable use policy and staff guidelines, AI readiness assessment, AI risk and privacy impact assessment for a specific tool, AI governance framework with roles and approvals.

Not sure where to start?

Most organisations begin with an NDPA readiness assessment. It shows where you stand across all five practices.

Request a consultation

The life of a record

Follow one customer record through your organisation. Privacy says what is allowed at each stage. Security makes sure it holds.

Privacy and security controls at each stage of a record's life
  1. Privacy: Lawful basis and privacy noticeCollectSecurity: Secure forms and encrypted transfer
  2. Privacy: Records of processingStoreSecurity: Access control and encryption at rest
  3. Privacy: Purpose limitation and DPIAUseSecurity: Least privilege and activity logs
  4. Privacy: Processing agreements and transfer checksShareSecurity: Vendor security review
  5. Privacy: Retention scheduleKeep or deleteSecurity: Backup, recovery and secure disposal

The numbers every organisation should know

142days

Days until the next annual compliance audit return is due on 31 March 2027.

Check your readiness
  • 72hours

    to notify the NDPC of a personal data breach once you become aware of it.

    Source: Nigeria Data Protection Act 2023

  • 2%

    of annual gross revenue: the maximum remedial fee for data controllers of major importance, or ₦10 million if higher.

    Source: NDPA 2023, section 48

  • 480,000

    data protection professionals Nigeria is short of, according to the NDPC.

    Source: NDPC, reported by NAN, 2026

Live briefing

What is happening in data, security and AI

Headlines from trusted sources, refreshed every 30 minutes.

Links open the original publisher. SafeDaTech is not responsible for third party content.

Free tools and templates

Data protection templates, HR tools, AI guidance and security posters. Download, adapt and use them today.

All 12 downloads

Data protection templates

NDPA starter checklist

Twenty practical checks to see where your organisation stands against the Nigeria Data Protection Act 2023 and GAID 2025.

Data protection templates

Privacy notice template

A plain language privacy notice structure for websites, forms and service sign ups, with prompts for each section.

Data protection templates

One page breach response plan

What to do in the first hour, the first day and within 72 hours of a personal data breach, with a breach log to record decisions.

HR tools

Employee confidentiality and data protection undertaking

A short undertaking for new and existing staff to sign, covering confidential information, personal data, devices and AI tools.

Responsible AI

AI do's and don'ts for staff

A one page guide to print or share with staff on using ChatGPT, Gemini, Copilot and similar tools safely at work.

Security awareness

Ten security habits for every staff member

A printable poster of ten everyday habits that stop most phishing, account takeover and data loss incidents.

The sectors we serve, and what they hold

How we work with you

  1. 1

    Discover

    Understand your organisation, obligations and priorities.

  2. 2

    Map

    Trace the personal data, systems and AI tools you rely on.

  3. 3

    Assess

    Measure gaps against the NDPA, security practice and your own policies.

  4. 4

    Recommend

    A prioritised plan with costs, owners and dates.

  5. 5

    Implement

    Policies, controls and documents put in place with your team.

  6. 6

    Enable

    Train staff so the new way of working sticks.

  7. 7

    Monitor

    Review, refresh and prepare for each annual return.

Technology to back it up

  • Software and digital solutions

    Websites, web applications, portals and information management systems, built securely from the start.

  • ICT infrastructure

    Networks, servers, Microsoft 365, Google Workspace, cloud, backup and IT support.

  • ICT procurement

    Computers, network equipment, CCTV, power backup and software licences, sourced to specification.

  • Data analytics and research

    Dashboards, data quality, survey design, statistical analysis and report writing.

Technology services

Insights

All insights

Let's build a more secure and responsible digital environment.

Tell us what you need to protect. We will reply within two working days with next steps.

Talk to SafeDaTech

The monthly data protection and AI briefing

NDPA updates, deadlines, practical tips and new free tools, once a month. No spam, unsubscribe any time.