NSC's Compliance Reporting ×
🔒

Privacy Policy

Nigeria Sanctions Committee (NIGSAC)

About this Site

The Nigerian Sanctions Committee (NIGSAC) website (the "Site") provides access to sanctions-related services, including a subscription service for sanctions updates and an API connection request service.

To operate these services, the Site collects personal data from users who complete the relevant forms.

Scope of this Privacy Policy

This Privacy Policy explains the personal data collected through the Site, how it is processed, the purposes for which it is used, and the rights available to users in relation to that data.

Definition of Personal Data

"Personal data" means any information relating to an identified or identifiable natural person. This includes, but is not limited to:

  • Name
  • Phone number
  • Email address
  • Organisation details

Collection of Personal Data

1. Data Collected Automatically

When you visit the Site, certain technical data may be collected automatically to support the operation, security, and performance of the Site. This may include:

  • Internet Protocol (IP) address
  • Browser type
  • Device type
  • Operating system
  • Date and time of access
  • Pages visited

This data is processed for legitimate administrative, statistical, and security purposes.

2. Data Provided by Users

a. Subscription Form

When you subscribe to receive sanctions updates from NIGSAC, the following mandatory personal data is collected:

  • Regulator
  • Entity Type
  • Organization Name
  • First Name
  • Last Name
  • Phone Number
  • Email Address

This data is collected solely for the purpose of providing alerts and updates relating to designations issued by:

  • the United Nations Security Council; and
  • the Nigerian Sanctions Committee.

b. API Connection Request Form

When you submit an API connection request, the following mandatory personal data is collected:

  • Regulator
  • Entity Type
  • Organization Name
  • First Name
  • Last Name
  • Phone Number
  • Email Address

This data is collected solely for the purpose of receiving, processing, and administering your API access request and communicating with you regarding that request.

Purpose of Processing

Personal data collected through the Site is processed only for purposes directly connected with the services provided, including:

  • enabling users to subscribe to sanctions updates;
  • sending alerts following designations by the United Nations Security Council and the Nigerian Sanctions Committee;
  • receiving and processing API connection requests;
  • communicating with users regarding their subscriptions or requests; and
  • maintaining the security, integrity, and proper functioning of the Site.

Lawful Processing

Personal data is processed on the basis of:

  • user consent;
  • legitimate interest (including system security and service improvement); and
  • applicable legal or regulatory obligations.

Data Retention

Subscription Data

Personal data collected through the subscription form shall be retained only for as long as the user remains subscribed to receive sanctions updates.

Where a user unsubscribes, the personal data collected for subscription purposes shall be deleted or irreversibly anonymised without undue delay, except where retention is required by law or necessary for security, audit, or legitimate administrative purposes.

Uncompleted Subscriptions and Invalid Contact Data

Where a user:

  • initiates but does not complete a subscription process; or
  • provides an email address that is determined to be invalid, undeliverable, or non-functional (e.g., based on delivery failure notifications),

such data shall be deleted within seven (7) days, except where temporary retention is necessary for:

  • detecting or preventing abuse, spam, or fraudulent activity;
  • maintaining system integrity and security logs; or
  • complying with applicable legal or regulatory requirements.

API Request Data

Personal data collected through the API connection request form shall be retained only for as long as necessary to process, administer, and maintain records relating to the API access request, subject to any legal, regulatory, security, or audit requirements.

Disclosure of Personal Data

As a general rule, personal data collected through the Site will not be disclosed to third parties except where:

  • required by law;
  • necessary to protect the integrity and security of the Site; or
  • required for the performance of official functions connected to the services provided.

Data Security

Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, disclosure, alteration, loss, or misuse.

User Rights

Subject to applicable law, users may:

  • request access to their personal data;
  • request correction of inaccurate data;
  • request deletion of their data.

Third-Party Websites

Where the Site contains links to third-party websites or services, NIGSAC is not responsible for their privacy practices.

Policy Updates

This Privacy Policy may be updated from time to time. Updates take effect upon publication on this page.

Contact Information

Nigerian Sanctions Committee (NIGSAC)
12 Ibrahim Taiwo Street,
Aso-Rock Villa, Abuja, Nigeria
info@nigsac.gov.ng