As technology continues to transform the way personal and corporate data is created, stored, processed, and transferred, data protection and privacy have become central to operational trust, regulatory compliance, and reputational security. At Smith & Partners LP, we provide end-to-end advisory and compliance support to clients navigating Nigeria's data protection framework and international privacy regimes such as the EU General Data Protection Regulation (GDPR), the UK Data Protection Act, and other cross-border privacy laws.
Our services cover regulatory compliance audits, data governance strategies, lawful basis assessments, the creation and review of privacy notices and policies, employee training, data breach response, and enforcement defence. We also advise multinational corporations, fintech startups, healthcare providers, NGOs, and public sector entities on data subject rights, consent management, children's data, profiling, cross-border data transfers, and privacy-by-design implementation.
One of our partners was involved in the legal team that developed the internal privacy infrastructure for one of West Africa's largest telecommunications groups — conducting a full gap analysis under the NDPR, drafting customised data protection policies, and designing an internal audit mechanism in anticipation of regulator inspections.
We are currently advising a fast-scaling Nigerian financial services company on its enterprise-wide data mapping, lawful basis for processing client financial records, risk mitigation strategies for biometric data use, and compliance structuring in anticipation of NDPC audits.
We recently supported a prominent e-commerce company in revising its data collection processes, cookie banners, and direct marketing protocols to ensure alignment with best practices in consumer protection and privacy transparency — resulting in enhanced user trust and improved platform engagement.
At Smith & Partners LP, we understand that data is now both a critical asset and a potential liability. Our legal strategies are tailored to shield organisations from the growing risks of non-compliance, while ensuring they remain agile, transparent, and globally competitive in a data-driven age.
Key Matters & Experience
Telco Privacy Infrastructure
Developed the internal privacy infrastructure for one of West Africa's largest telecommunications groups — NDPR gap analysis, customised data protection policies, and internal audit mechanisms for regulator readiness.
Financial Services NDPC Compliance
Advising a fast-scaling financial services company on enterprise-wide data mapping, lawful processing basis, biometric data risk mitigation, and full NDPC audit-readiness structuring.
Multinational NGO Privacy Harmonisation
Advised a multinational NGO operating across six West African countries on harmonising privacy practices — data retention schedules, multilingual frameworks, and employee handbook compliance.
E-Commerce Privacy Overhaul
Supported a prominent e-commerce company in revising data collection processes, cookie banners, and direct marketing protocols, improving user trust and regulatory alignment.
Hospital Data & Health Records
Advised a major Lagos hospital group on confidentiality, storage, and access rules for sensitive patient data under the NDPR and Nigerian Health Records Act, including data processing agreements with health tech vendors.
Cross-Border Data Transfers
Advisory on cross-border data transfer mechanisms, standard contractual clauses, and binding corporate rules for multinational clients operating across EU, UK, and Nigerian data protection regimes.
