Data Protection & AI Governance
Every business holds information that people trust it to protect. As businesses adopt new technologies, expand across borders and handle more sensitive data, gaps in privacy and AI governance can expose them to regulatory scrutiny, financial loss and damaged relationships. The challenge is to innovate responsibly while meeting regulatory obligations, maintaining control over data and protecting the trust on which the business depends.
What we cover
Sub-services
- 01Data Protection Compliance and Regulatory Advisory
- 02Data Protection Officer and Privacy Governance
- 03Privacy Impact Assessments and Data Processing Advisory
- 04Privacy Documentation and Data Transfer Agreements
- 05Artificial Intelligence Governance and Regulatory Compliance
- 06Digital Assets, Blockchain and Fintech Regulatory Advisory
- 07Data Protection Training and Advisory
- 08Data Breach Response, Regulatory Investigations and Dispute Resolution
Track records
Our achievements
- Led the team that routinely advised Google (now Alphabet) on NDPR compliance relating to Nigerian employee data.
- Supported the Nigerian privacy aspects of a global programme for the Ford Foundation alongside Morgan Lewis and advisers across multiple continents.
- Advised Talent PEO Limited on data-sharing agreements, data processing contracts and privacy policies.
- Conducted a privacy audit for Hayat Kimya, a foreign company operating in Nigeria, in connection with its data privacy filing.
- Advised Reeple Nigeria and Reeple Canada, a cross-border payments business, on major aspects of their local and global privacy programmes, including consecutive data privacy audits.
- Reviewed a recruitment privacy notice for Nigerian Breweries Plc (Heineken) against the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive, and prepared staff data privacy training content.
- Advised a health technology company on algorithmic risk classification and governance design in alignment with NITDA requirements, addressing historical documentation and consent risks.
- Advised a health technology start-up on subscription agreements, end-user licence agreements, terms of use and privacy policies, including data protection impact considerations and cross-border data transfer frameworks.
- Advised a health technology start-up on subscription agreements, end-user licence agreements, terms of use and privacy policies, including data protection impact considerations and cross-border data transfer frameworks.
- In prior practice, our Managing Partner set up the Technology team at SimmonsCooper Partners, a licensed data protection compliance organisation, and advised a Nigerian fintech that later expanded into Canada on NDPR audit filings ahead of a raise of over US$300,000.
- As Corporate Counsel at Guaranty Trust Bank Plc, our Managing Partner supported aspects of the bank's adoption of the eNaira framework, including strategic commercial and technology advisory.
- Advised on the legal and regulatory framework applicable to Bitcoin mining operations in Nigeria, including entity structuring and regulatory risk management.