NDPA 2023 and Your Banking Data: What Bompai Customers Should Know

The Nigeria Data Protection Act, 2023 (NDPA) is the country's primary data protection law. It applies to every organisation that processes personal data of people in Nigeria — including every bank. At Bompai, we hold a lot of sensitive information about you, and the NDPA defines the rules we follow when we handle it.

Your rights under NDPA

• The right to be informed about what data we hold and why.
• The right to access your data and request a copy.
• The right to correct inaccurate data.
• The right to ask us to delete data we no longer need (subject to legal retention rules).
• The right to object to certain types of processing — e.g. marketing.
• The right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

What Bompai uses your data for

• Identifying you and meeting our CBN / NDIC KYC obligations.
• Running your accounts and processing transactions.
• Detecting and preventing fraud.
• Communicating with you about your accounts and any product changes.
• Reporting to regulators as required by law.

What we do NOT do with your data

• We do not sell your data to third parties.
• We do not share your data for marketing without your consent.
• We do not use your transaction history to make automated decisions that materially affect you without human review.

Exercising your rights

You can exercise any of your NDPA rights by emailing our Data Protection Officer or filing a request through the Data Protection page on this website. We will respond within 30 days. If you are not satisfied, you may escalate to the Nigeria Data Protection Commission.