Privacy notice

Who controls this data

The National Energy Investment & Intelligence Administration is the data controller for Administration & Governance. Processing is carried out under the Nigeria Data Protection Act 2023.

To be completed before launch. NEIIA must publish the name and address of its Data Protection Officer and the address for data subject requests here. This page states accurately what the software does; the contact details are the Administration's to give.

What is recorded

• Directory entries. The name, mandate, location, leadership and published contact details of bodies operating in the energy sector. These are organisational records, published in the public interest, not personal profiles.
• Corrections and record requests. Your name, email address, organisation if you give one, and what you told us. We need the email address to tell you the outcome.
• Staff accounts. Name, work email address, a one way hash of the password, the role and any module bindings, and who granted them and why.
• Actions. Every consequential act is appended to an audit log with the identifier of the person who performed it and the time.

What is not recorded

Audit log entries carry identifiers, states and hashes only. They do not carry names, email addresses or document contents. The log can prove what happened without republishing who said what about whom.

What becomes public

Directory entries, the register, decision records and disclosures are public: that is the purpose of the module. The outcome of a correction request is published against its reference, so that the handling of a challenge can be seen. Your name, email address and the text you submitted are not published; only the reference, the field concerned, the status and the recorded outcome are.

How long it is kept

Directory versions, register entries, decision records and disclosures are retained permanently, because they are the record of an administrative act and the module corrects by adding a version rather than by deleting. Audit entries cannot be edited or removed by anyone, including us: the database refuses it.

Your rights

Under the Act you may ask for a copy of your data, ask that inaccurate data be corrected, and object to processing. Correction is handled by adding a corrected version with the reason recorded, so the earlier state remains visible. Erasure is limited where the record is an act of administration that the law requires us to keep.

Cookies

This service sets two cookies, both strictly necessary and neither used for tracking: a short-lived session token, and a longer-lived sign-in token that your browser cannot read. There is no analytics, advertising or third-party tracking on this service.