ACU Commences Data Protection Compliance Audit with Licensed DPCO

Ajayi Crowther University (ACU), Oyo, has commenced the next phase of its ongoing data protection compliance engagement with Yemi Odebunmi & Co., a licensed Data Protection Compliance Organisation (DPCO), as the university strengthens its data protection, privacy and information security practices.

The data protection audit commenced following a visit to the university by the Senior Partner of Yemi Odebunmi & Co., Dr Yemi Odebunmi, accompanied by Mr Victor Bankole.

The visit provided an opportunity for further engagement with the university management and marked the commencement of the implementation phase of the institution’s data protection compliance roadmap.

The ongoing engagement is part of ACU’s commitment to ensuring that personal information entrusted to the university by students, staff, parents, applicants, alumni and other stakeholders is collected, processed, stored and protected responsibly and in accordance with applicable data protection requirements.

The university’s collaboration with Yemi Odebunmi & Co. has already included management-level data protection and cybersecurity awareness activities, with a three-day virtual awareness programme previously conducted for members of the management.

The current phase focuses on a comprehensive Data Protection Audit, which will examine the university’s data processing practices and information-handling structures across relevant units and departments.

The exercise is expected to identify existing gaps, assess privacy and data protection risks, and provide recommendations for strengthening the university’s compliance framework.

Speaking at the commencement of the exercise, Dr Yemi Odebunmi explained that the engagement was aimed at helping the university address identified gaps and implement the requirements of the Nigeria Data Protection Act (NDPA) 2023.

He said, “The primary reason why we are here is to assist Ajayi Crowther University to act where there are gaps in line with the directive of the Nigeria Data Protection Commission. So we are here today for the full commencement of the implementation exercise.”

The ongoing engagement will also support the development and strengthening of key institutional data protection documents and frameworks, including the university’s Privacy Policy, Data Retention Policy and Data Subject Access Request (DSAR) Framework.

It will also include targeted data protection and cybersecurity awareness programmes for personnel whose responsibilities involve handling personal information.

As part of the compliance process, the university is also progressing with the training and certification of designated Data Protection Officers to further strengthen its institutional capacity to manage data protection responsibilities.

The Vice-Chancellor, Professor Ebunoluwa Oduwole, expressed appreciation for the continued support and professional guidance provided by the consultants.

She noted that the university had worked with the organisation over time and remained committed to taking data protection seriously.

Also speaking, the Deputy Vice-Chancellor (Academic), Professor Afolake Olabiwoninu, highlighted the importance of data protection to the university, given the breadth of its relationships with students, staff, parents, regulatory bodies and other stakeholders.

She assured the consultants of the university’s cooperation throughout the exercise.

The ongoing collaboration underscores Ajayi Crowther University’s commitment to data privacy, accountability, responsible information management and cybersecurity, while strengthening institutional systems in line with regulatory expectations and international best practices.