Please wait....Please wait....NSW PLATFORM | PRIVACY NOTICE
Issued by: NSW Secretariat | Version 1.0 | Effective Date: July 2026
Compliance Frameworks:
Nigeria Data Protection Act 2023 (NDPA) • General Application and Implementation Directive (GAID) 2025
The National Single Window (NSW) Platform is a government-operated digital trade facilitation infrastructure managed by the NSW Secretariat under the Nigeria Revenue Service. The NSW Platform serves as a unified electronic portal through which traders, importers, exporters, regulatory agencies, and other authorised stakeholders submit, process, and receive trade-related regulatory documentation, licenses, permits, certificates, and approvals.
The NSW Secretariat is committed to protecting the privacy, confidentiality, and security of all personal data and commercially sensitive information processed through the NSW Platform. This Privacy Policy sets out how the NSW Secretariat collects, uses, stores, shares, protects, and disposes of personal data in connection with the operation of the NSW Platform.
| Data Category | Examples |
|---|---|
| Registration and Identity Data | This includes information collected for user registration and verification on the NSW Platform. For individuals, it covers name, date of birth, nationality, passport details, address, email, and phone number. For corporate entities, it includes the company name, Corporate Affairs Commission (CAC) registration number, Tax Identification Number (TIN), business address, nature of business, and details of authorised representatives. For regulatory personnel, it covers staff ID, government-issued identification, agency affiliation, designation, and assigned system role or access level. |
| Trade Transaction Data | This comprises personal and commercial data generated during import and export processing. It includes details of importers, exporters, consignees, consignors, and intermediaries such as brokers and agents. It also covers goods information (e.g., description, HS codes, quantity, value, origin/destination), License, Permits, Certificates and Other regulatory documents (LPCO) application details, application status, and payment records, including fees and transaction references. |
| Technical and Interaction Data | This includes system-generated data from user interactions with the platform, such as IP address, device and browser details, operating system, login activity, session duration, pages accessed, and actions taken. It also covers error logs, failed access attempts, API usage logs, and audit trails showing data access and modifications. |
| Communications Data | This covers all user communications with the NSW Secretariat, traders and regulatory agencies, including platform messages, emails, support requests, complaints, feedback, and responses. It also includes notification records and any dispute or grievance-related correspondence. |
| Regulatory/Product Data | This includes regulatory information relating to goods and traders. It covers product registrations, risk classifications, inspection outcomes, enforcement actions, and historical regulatory decisions such as approvals, rejections, or conditions. |
| Other Relevant Trade Data | This includes ancillary trade and logistics information such as vessel and shipment details, container and bill of lading numbers, port information, cargo manifests, Form M and Letters of Credit, and supporting documents. It also covers data from third-party laboratories and certification bodies, including test and inspection reports. |
The NSW Secretariat does not collect sensitive personal data as defined under Section 30 of the NDPA (including health, biometric, or political data) unless expressly required by applicable law or regulatory mandate.
We only process personal data where we have a valid lawful basis under NDPA s.25:
| Processing Activity | Lawful Basis (NDPA s.25) |
|---|---|
| Platform registration and account creation | Legal Obligation |
| Identity verification and KYC/KYB checks | Legal Obligation |
| Processing trade regulatory applications (licences, permits, certificates, clearances) | Legal Obligation |
| Routing applications to integrated regulatory agencies (NAFDAC, NESREA, NAQS, NCS, etc.) | Legal Obligation |
| Payment processing for statutory fees and levies | Legal Obligation |
| Platform security monitoring, intrusion detection, and access logging | Legal Obligation |
| Maintaining audit trails and transaction records | Legal Obligation |
| Sharing personal data with law enforcement or judicial authorities | Legal Obligation |
| Generating trade statistics and platform performance analytics | Legal Obligation; Legitimate Interest |
| Responding to data subject rights requests | Legal Obligation |
| Data breach investigation, notification, and remediation | Legal Obligation |
| Conducting Data Protection Impact Assessments (DPIAs) | Legal Obligation |
| User training, awareness, and internal compliance administration | Legal Obligation |
| Providing technical support and resolving user complaints | Legitimate Interest |
| Sending operational communications (system alerts, maintenance notices, status updates) | Legal Obligation; Legitimate Interest |
| Sending optional marketing or informational communications (platform updates, new features, trade advisories) | Consent |
| Retention of personal data beyond the active processing period | Legal Obligation |
| Automated risk profiling and screening of trade applications | Legal Obligation |
We share personal data only where necessary for regulatory processing or as required by law. Recipients include:
We do not sell, rent, or commercially exploit your personal data. All third-party processors are bound by DPAs that are consistent with the NDPA and the GAID.
We do not transfer your personal data outside Nigeria. All data processed through the NSW Platform is hosted and stored on Nigerian-domiciled infrastructure.
We retain personal data only for as long as necessary for the purposes collected or as required by law.
| Data Category | Retention Period | Legal Basis / Justification |
|---|---|---|
| Registration and Identity Data | 10 Years | CBN AML/CFT Regulations 2022 + Money Laundering Act, CAMA 2020 + CITA Section 63 (as amended) |
| Trade Transaction Data | 10 Years | CAMA 2020 + CITA Section 63 (as amended) |
| Technical and Interaction Data | 10 Years | CBN AML/CFT Regulations 2022 + Money Laundering Act, CAMA 2020 + CITA Section 63 (as amended) |
| Communications Data | 10 Years | CBN AML/CFT Regulations 2022 + Money Laundering Act |
| Regulatory/Product Data | 10 Years | CBN AML/CFT Regulations 2022 + Money Laundering Act, CAMA 2020 + CITA Section 63 (as amended) |
| Other Relevant Trade Data | 10 Years | Public interest (data for shaping micro and macro-economic policies) |
Upon expiry of the applicable period, data is securely deleted or irreversibly anonymised.
Under the NDPA 2023 (ss.34–41) and the GAID 2025, you have the following rights:
| S/No | Right |
|---|---|
| 1 | Right to be Informed |
| 2 | Right of access |
| 3 | Right to rectification |
| 4 | Right to erasure (“right to be forgotten”) |
| 5 | Right to restriction of processing |
| 6 | Right to object |
| 7 | Right to withdraw consent at any time, where we process data based on your consent |
| 8 | Right not to be subject to automated decision-making |
| 9 | Right to issue Standard Notice to Address Grievance (SNAG) |
Exercise your rights: Email dpo@nsw.gov.ng or use the Privacy Rights Request form at www.nsw.gov.ng/privacy. We respond within 30 days (NDPA s.34; GAID).
The NSW Platform uses cookies to enable essential functionality and improve your experience. On your first visit, you will be presented with a cookie consent banner. You may manage your preferences at any time via Cookie Settings in the Platform.
| Cookie Type | Category | Purpose | Legal Basis |
|---|---|---|---|
| JSESSIONID Session Cookie | Necessary | It is used for session management to track a user's session within a J2EE web application. | Contractual, Legitimate Interest |
| MYSESSIONID Session Cookie | Necessary | It is a temporary, server-specific file used to identify a unique user and maintain their state while they browse a specific website. | Contractual, Legitimate Interest |
Strictly necessary cookies cannot be disabled as they are essential for the operation of the NSW Platform.
We prioritise your privacy and use advanced technical measures to protect your data. While no online platform is entirely foolproof, we are dedicated to safeguarding your information against loss, misuse, and unauthorised access.
In the event of a personal data breach that poses a risk to your rights, we will notify the NDPC within 72 hours and, where the risk is high, notify you directly, in plain language, as soon as practicable.
The NSW Platform uses automated risk-screening tools to prioritise or flag trade applications. No adverse decision affecting you will be made solely by automated means without human review. You have the right to request a human review of any automated decision.
| Organisation | National Single Window Secretariat, Nigeria Revenue Service |
|---|---|
| Address | NSW Secretariat, 7th Floor, 26, Sokode Crescent, Wuse, Zone 5, Abuja |
| DPO Email | dpo@nsw.gov.ng |
| Website | nsw.gov.ng |
| Phone |
If you are not satisfied with our response to a rights request or complaint, you have the right to escalate directly to the Nigeria Data Protection Commission (NDPC) at any time.
We review this Notice at least annually. Where material changes are made, we will notify Registered Users via the NSW Platform or by email at least 30 days before changes take effect.
The current version is always available at www.nsw.gov.ng/privacy-policy.
Continued use of the NSW Platform after the effective date of an update constitutes acceptance of the revised Notice.
This Notice was approved by the Director, NSW Secretariat on July 14, 2026.