NSW PLATFORM | PRIVACY NOTICE
Issued by: NSW Secretariat | Version 1.0 | Effective Date: July 2026
Compliance Frameworks:
Nigeria Data Protection Act 2023 (NDPA) •
General Application and Implementation Directive (GAID) 2025
The National Single Window (NSW) Platform is a government-operated digital trade facilitation infrastructure managed by the NSW Secretariat under the Nigeria Revenue Service.
The NSW Platform serves as a unified electronic portal through which traders, importers, exporters, regulatory agencies, and other authorised stakeholders submit, process, and receive trade-related regulatory documentation, licenses, permits, certificates, and approvals.
The NSW Secretariat is committed to protecting the privacy, confidentiality, and security of all personal data and commercially sensitive information processed through the NSW Platform.
| Data Category | Examples |
|---|---|
| Registration and Identity Data | This includes information collected for user registration and verification on the NSW Platform. For individuals, it covers name, date of birth, nationality, passport details, address, email, and phone number... |
| Trade Transaction Data | This comprises personal and commercial data generated during import and export processing... |
| Technical and Interaction Data | IP address, device and browser details, operating system, login activity, session duration, pages accessed and audit logs... |
| Communications Data | Platform messages, emails, support requests, complaints, feedback and responses. |
| Regulatory/Product Data | Product registrations, risk classifications, inspection outcomes and regulatory decisions. |
| Other Relevant Trade Data | Shipment details, container numbers, cargo manifests, Form M and supporting documents. |
The NSW Secretariat does not collect sensitive personal data as defined under Section 30 of the NDPA unless expressly required by applicable law or regulatory mandate.
We only process personal data where we have a valid lawful basis under NDPA Section 25.
| Processing Activity | Lawful Basis (NDPA s.25) |
|---|---|
| Platform registration and account creation | Legal Obligation |
| Identity verification and KYC/KYB checks | Legal Obligation |
| Processing trade regulatory applications | Legal Obligation |
| Routing applications to integrated regulatory agencies | Legal Obligation |
| Payment processing for statutory fees and levies | Legal Obligation |
| Platform security monitoring and access logging | Legal Obligation |
| Maintaining audit trails and transaction records | Legal Obligation |
| Sharing data with law enforcement authorities | Legal Obligation |
| Generating trade statistics and analytics | Legal Obligation / Legitimate Interest |
| Responding to data subject requests | Legal Obligation |
| Data breach investigations | Legal Obligation |
| DPIAs and compliance administration | Legal Obligation |
| Technical support and complaint resolution | Legitimate Interest |
| Operational notifications and alerts | Legal Obligation / Legitimate Interest |
| Marketing and informational communications | Consent |
| Retention beyond active processing period | Legal Obligation |
| Automated risk profiling and screening | Legal Obligation |
We share personal data only where necessary for regulatory processing or as required by law.
We do not sell, rent, or commercially exploit personal data. All third-party processors are bound by data protection agreements consistent with the NDPA and GAID.
We do not transfer your personal data outside Nigeria. All data processed through the NSW Platform is hosted and stored on Nigerian-domiciled infrastructure.
We retain personal data only for as long as necessary for the purposes collected or as required by law.
| Data Category | Retention Period | Legal Basis / Justification |
|---|---|---|
| Registration and Identity Data | 10 Years | CBN AML/CFT Regulations 2022, CAMA 2020, CITA Section 63 |
| Trade Transaction Data | 10 Years | CAMA 2020 and CITA Section 63 |
| Technical and Interaction Data | 10 Years | CBN AML/CFT Regulations and Money Laundering Act |
| Communications Data | 10 Years | CBN AML/CFT Regulations and Money Laundering Act |
| Regulatory/Product Data | 10 Years | CAMA 2020 and CITA Section 63 |
| Other Relevant Trade Data | 10 Years | Public Interest and Economic Policy Purposes |
Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised.
Under the NDPA 2023 and GAID 2025, you have the following rights:
| S/N | Right |
|---|---|
| 1 | Right to be Informed |
| 2 | Right of Access |
| 3 | Right to Rectification |
| 4 | Right to Erasure (Right to be Forgotten) |
| 5 | Right to Restriction of Processing |
| 6 | Right to Object |
| 7 | Right to Withdraw Consent |
| 8 | Right not to be Subject to Automated Decision Making |
| 9 | Right to Issue Standard Notice to Address Grievance (SNAG) |
The NSW Platform uses cookies to enable essential functionality and improve your experience.
Exercise your rights via: dpo@nsw.gov.ng or use the Privacy Rights Request form available on the NSW website.
| Cookie Type | Category | Purpose | Legal Basis |
|---|---|---|---|
| JSESSIONID Session Cookie | Necessary | Used for session management within a J2EE application. | Contractual, Legitimate Interest |
| MYSESSIONID Session Cookie | Necessary | Maintains user identification and session state. | Contractual, Legitimate Interest |
Strictly necessary cookies cannot be disabled because they are essential to the operation of the NSW Platform.
We prioritise your privacy and use advanced technical measures to protect your data. While no online platform is entirely foolproof, we are dedicated to safeguarding your information against loss, misuse and unauthorised access.
In the event of a personal data breach that poses a risk to your rights, we will notify the NDPC within 72 hours and where the risk is high, notify affected individuals as soon as practicable.
The NSW Platform uses automated risk-screening tools to prioritise or flag trade applications. No adverse decision affecting you will be made solely through automated means without human review. You have the right to request a human review of any automated decision.
| Organisation | National Single Window Secretariat, Nigeria Revenue Service |
|---|---|
| Address | NSW Secretariat, 7th Floor, 26 Sokode Crescent, Wuse Zone 5, Abuja |
| DPO Email | w.gov.ng"> dpo@nsw.gov.ng |
| Website | https://www.nsw.gov.ng www.nsw.gov.ng |
| Phone |
If you are not satisfied with our response to a rights request or complaint, you have the right to escalate directly to the Nigeria Data Protection Commission (NDPC).
We review this Notice at least annually.
Where material changes are made, we will notify registered users via the NSW Platform or by email at least 30 days before changes take effect.
The current version is always available at: www.nsw.gov.ng/privacy-policy
Continued use of the NSW Platform after the effective date of an update constitutes acceptance of the revised Notice.
This Notice was approved by the Director, NSW Secretariat on July 14, 2026.