The Oil and Gas Trainers Association of Nigeria (OGTAN) in carrying out its mandate of the
standardisation, certification and supervision of the training services of member organisations across
Nigeria’s oil and gas sector, collects and processes personal data relating to member organisations,
trainees, assessors, instructors, and other stakeholders, including sensitive documentation submitted
through the Accredited Training Service Provider (ATSP) audit process.Â
OGTAN is fully committed to protecting the privacy and fundamental rights of every individual whose
personal data it handles. We comply with the Nigeria Data Protection Regulation (NDPR) 2019, all
directives issued by the National Information Technology Development Agency (NITDA), and the data
confidentiality obligations embedded in our Training Quality Standard. Personal data in our custody is
processed lawfully, collected only for defined purposes, kept accurate and secure, and retained no longer
than is necessary.
As the data controller, OGTAN affirms its unwavering commitment to the integrity and security of every
data collected by ensuring transparent notification at the point of data collection, maintaining lawful and
proportionate processing at all times, safeguarding the right of access, rectification, and erasure,
preserving strict confidentiality of all audit documentation, encrypting sensitive financial records, issuing
timely breach notifications to NITDA and affected data subjects, prohibiting the sale of personal data to
any third party, and mandating comprehensive data protection training for all staff and auditors.
Member organisations are required, as a condition of ATSP accreditation, to maintain their own Privacy,
Confidentiality, and Security Policy in accordance with our Training Quality Standards. Third-party ATSP
auditors appointed by OGTAN operate under a signed Data Processing and Non-Disclosure Agreements
and may access member financial records solely for the limited purpose of the accreditation audit only,
and in strict compliance with all relevant sections of our Training Quality Standard.
To exercise your data subject rights, report a concern, or obtain a copy of OGTAN’s full Data Protection
Policy, please contact our Data Protection Officer at dpo@ogtan.org.ng.
Â
Oil and Gas Trainers Association of Nigeria
The Oil and Gas Trainers Association of Nigeria (OGTAN) is fully committed to protecting the privacy and fundamental rights of every individual whose personal data it handles — including member organisations, trainees, assessors, instructors, and all ATSP audit stakeholders.
In carrying out its mandate of standardisation, certification and supervision of training services across Nigeria's oil and gas sector, OGTAN collects and processes personal data including sensitive documentation submitted through the Accredited Training Service Provider (ATSP) audit process. This policy explains how that data is handled, protected, and what rights you hold as a data subject.
OGTAN operates as the data controller for all personal data collected in connection with its regulatory and accreditation activities. This policy applies to all data subjects whose information OGTAN handles, including:
Representatives and staff of member organisations
Trainees enrolled in OGTAN-accredited programmes
Assessors and instructors involved in ATSP delivery
Third-party auditors appointed by OGTAN
Website visitors and general enquirers
We comply with the Nigeria Data Protection Regulation (NDPR) 2019, all directives issued by the National Information Technology Development Agency (NITDA), and the data confidentiality obligations embedded in our Training Quality Standard.
OGTAN collects personal data strictly limited to what is necessary for the following purposes:
Organisation name, address, RC number, Managing Director details, ownership structure, zone, and subscription type.
Compliance documents (PENCOM, Tax Clearance, ITF, NUPRC/NMDPRA permits), organisational structure, faculty credentials, training facility data, and financial records reviewed under strict audit-only access.
Name, contact details, qualifications, training participation, assessment outcomes, and certification records.
IP address, browser type, pages visited, form submissions — collected via cookies and analytics for security and service improvement.
As the data controller, OGTAN affirms its unwavering commitment to the integrity and security of every data it collects:
This obligation ensures that every OGTAN-accredited training provider operates with data protection practices that are consistent, auditable, and aligned with the NDPR 2019 — protecting the personal data of all trainees and staff in their custody.
Third-party ATSP auditors appointed by OGTAN operate under the following strict controls:
Every appointed auditor must execute a binding DPA and NDA before accessing any member data.
Auditors may access member financial records solely for the purpose of the accreditation audit — no secondary use is permitted.
All data handling during the audit must be conducted in strict compliance with all relevant sections of OGTAN's Training Quality Standard.
Auditors are prohibited from disclosing, sharing, copying, or retaining any member data beyond the scope and duration of the audit engagement.
Under the NDPR 2019, every individual whose data OGTAN processes has the following rights:
Request a copy of personal data OGTAN holds about you.
Object to processing for direct marketing or profiling.
Correct inaccurate or incomplete data.
At any time, as easily as it was given.
Request deletion where data is no longer needed.
Lodge a complaint with NITDA or the relevant supervisory authority.
Name:
OGTAN DPO
Email:
dpo@ogtan.org.ng
Web:
ogtan.org.ng
Address:
20 Awudu Ekpekha Blvd, Lagos
Name:
NITDA
Email:
info@nitda.gov.ng
Web:
nitda.gov.ng
Address:
No. 28 Port Harcourt Crescent, Abuja
OGTAN reserves the right to review and update this policy from time to time in response to changes in the NDPR, NITDA directives, or our internal operational requirements. Any material changes will be communicated to member organisations by email and posted on this page with the updated effective date.