NIC Privacy Policy & Data Protection Statement
Governing data collection, storage, and rights under the Nigeria Data Protection Act (NDPA 2023) and international privacy standards.
1. Commitment to Data Protection
The National Institute of Caregivers (NIC) is committed to protecting the privacy, confidentiality, and security of all students, accredited caregivers, facility representatives, and platform users. All personal data collected by NIC is processed strictly in accordance with the Nigeria Data Protection Act (NDPA 2023) and applicable global privacy regulations (including GDPR principles for international stakeholders).
2. Information We Collect
NIC collects personal and professional data necessary for education, certification, accreditation, and verification services. This includes:
- Identity & Contact Information: Full name, national identity (NIN/Passport), date of birth, residential address, email, and phone number.
- Academic & Qualification Records: Prior educational attainment, course progress, clinical assessment scores, assessment answers, and internship completion letters.
- Professional Verification Data: Caregiver license numbers, facility registration details, employment history, and supervisor evaluation reports.
- Technical & Usage Logs: IP address, browser metadata, session duration, and security audit logs for system integrity.
3. Purpose of Data Processing
Your information is processed exclusively for institutional and statutory objectives:
Credential Administration
Managing course enrollments, issuing certificates, academic transcripts, and official verification badges.
Registry & Public Verification
Maintaining the official Public Caregiver & Facility Accreditation Registry for verified employer lookups.
Regulatory Inspections
Executing clinical facility compliance audits, inspection scoring, and professional disciplinary reviews.
System Security
Detecting fraudulent credential claims, securing portal access, and maintaining automated audit trails.
4. Data Security & Retention
NIC implements enterprise-grade security controls to prevent unauthorized access, data loss, or disclosure. All stored database content is encrypted at rest (AES-256) and in transit (TLS 1.3). Access to sensitive records is governed strictly by Row Level Security (RLS) and Role-Based Access Controls (RBAC).
Academic and certification records are retained permanently to support credential verification requests by third-party healthcare employers. Technical logs and transient files are pruned in accordance with NIC data lifecycle policies.
5. User Rights Under NDPA 2023
As a data subject under the NDPA, you have the right to:
- Request access to your personal data held by NIC.
- Request correction of inaccurate or incomplete personal information.
- Object to or request restriction of data processing, subject to statutory obligations.
- Request erasure of personal records, provided such records are not required by law or active professional certification standards.
Data Protection Officer & Inquiries
For any privacy concerns, data access requests, or NDPA compliance inquiries, please contact our Data Protection Office:
Email: privacy@nicnigeria.org | Official Portal: nicnigeria.org/contact