The Nigeria Data Protection Act 2023 applies to many survey and field-research workflows involving identifiable people in Nigeria. This operational checklist helps research teams ask the right questions, but it is not legal advice and does not replace review by a qualified privacy professional or the Nigeria Data Protection Commission's current guidance.
Record the research purpose, who determines that purpose and the means of processing, which service providers process data on instructions, and the lawful basis for each use. A Surveyor workspace does not decide those matters for the customer. Remove fields that are convenient but unnecessary for the stated study.
Name the controller and relevant processors
Map each data field to a stated purpose
Document the applicable lawful basis
Give a usable field privacy notice
Explain identity, purpose, data categories, recipients, retention, rights, complaints, and any optional location or follow-up in language participants can understand. Consent, where relied upon, must be a genuine choice and should not be bundled with access to unrelated benefits. Train enumerators to record refusals respectfully.
Use the participant's working language
Separate required and optional collection
Provide a privacy contact or complaint route
Assess higher-risk research
Sensitive information, children, vulnerable groups, precise location, biometrics, large-scale profiling, or decisions with serious effects may require stronger safeguards and a data-protection impact assessment. Limit precision, restrict roles, plan safe reporting thresholds, and seek ethics, sector, or legal review where applicable.
Complete risk review before deployment
Reduce identifiers and location precision
Separate safeguarding from routine analytics
Plan rights, transfers, retention, and incidents
Keep a current record of storage locations, subprocessors, access, exports, cross-border transfer grounds, retention, deletion, and response procedures. Verify whether registration, audit-return, data-protection-officer, breach-notification, or sector obligations apply to the organisation instead of assuming one rule fits every study.
Test access, correction, and deletion workflows
Approve transfers before collection begins
Set an internal breach escalation path
Authoritative sources
Use the primary materials below for the current legal or technical position. Surveyor's guide is practical information, not legal advice.
Yes. Surveyor templates and question structures are starting points. You can edit wording, answer options, required fields, logic, branding, and collection settings before publishing.
Can I collect responses on mobile devices?
Yes. Published Surveyor forms are designed for phones, tablets, and desktop browsers. Eligible plans also support offline queues for previously loaded surveys.
NDPA guide for survey and field research | Surveyor