2026 Data Protection Africa Summit

Masterclasses

The Masterclass Series is one of the most anticipated features of the Data Protection Africa Summit (DPAS). These sessions go beyond theory, offering participants practical, in-depth learning experiences in data protection, privacy, and cybersecurity.

Guided by leading practitioners and subject-matter experts, the masterclasses are designed to equip participants with real-world tools to navigate emerging trends, regulatory demands, and implementation challenges.

GSMA’s Implementing Smart Data Privacy Laws: Achieving the Right Outcomes for the Digital Age
03/11/2026
1:00 pm

Overview

Mobile and digital services continue to expand exponentially, and the significance of implementing smart and effective data privacy laws has never been more critical. Data protection authorities (DPAs) both newly formed and well-established, face a complex set of challenges as they implement data privacy laws while also supporting innovation and growth. In 2019, the GSMA released its Smart Data Privacy Laws report, outlining 14 key principles to help governments and policymakers develop forward-looking privacy frameworks. Building on that foundation, the recently published Smart Implementation of Data Privacy Laws report delves deeper into how these principles can be implemented effectively, with a particular focus on nine core principles that are most relevant to supervisory authorities. This Masterclass provides pragmatic insights into the implementation of guiding data protection principles aimed at helping governments, policymakers and organisations to develop effective and future-proof data privacy frameworks.

Masterclass facilitators:

Noriswadi Ismail, Senior Director of Data Privacy, Policy and Regulation, GSMA

Philippe Goabga, Senior Policy Manager, GSMA

Tooba Kazmi, Senior Manager, Consumer Policy, GSMA

 

 

03
NOV
Compliance Audit Returns (CAR)
03/11/2026
1:00 pm

Building DPO Capacity for Effective Compliance Reporting

The Nigeria Data Protection Commission (NDPC) is organising an expert-led Masterclass on Compliance Audit Returns (CAR) designed to strengthen the capacity of Data Protection Officers (DPOs) and other relevant data protection professionals to understand, prepare, review and effectively manage the Compliance Audit Returns process.

Understanding Compliance Audit Returns

Compliance Audit Returns (CAR) are formal returns submitted by organisations to the Nigeria Data Protection Commission to demonstrate their level of compliance with applicable data protection requirements. The process provides an important mechanism for organisations to assess their data protection practices, identify compliance gaps and provide the Commission with information necessary for regulatory oversight.

For many organisations, however, the CAR process presents practical challenges. DPOs may have responsibility for coordinating their organisation's data protection compliance but may not always have sufficient technical or practical knowledge of the requirements, methodology and documentation necessary to properly undertake the CAR process.

This is particularly important because organisations may engage Data Protection Compliance Organisations (DPCOs) licensed by the NDPC to provide professional support in data protection compliance activities, including assistance with the preparation and filing of Compliance Audit Returns. Effective compliance therefore requires DPOs to understand not only their own responsibilities but also how to work effectively with DPCOs, provide the necessary organisational information and critically review the compliance documentation and returns prepared with their support.

About the Masterclass

The NDPC Masterclass on Compliance Audit Returns (CAR) provides a practical and interactive learning environment where participants will learn directly from experts on the CAR process.

The Masterclass will go beyond a theoretical explanation of CAR. It will provide participants with practical guidance on how to approach the process, understand the information required, identify relevant compliance evidence, engage effectively with DPCOs and address common challenges that arise during the preparation and submission of returns.

Participants will also have the opportunity to engage directly with the experts, ask questions and seek clarification on areas of the CAR process that may be unclear or challenging in practice.

Objectives of the Masterclass

The Masterclass seeks to:

  • Build practical understanding of the Compliance Audit Returns process and its regulatory purpose.
  • Equip DPOs with the knowledge required to effectively coordinate their organisation's CAR process.
  • Clarify the roles and responsibilities of organisations, DPOs and licensed DPCOs in the preparation and submission of CAR.
  • Improve collaboration between DPOs and DPCOs by helping DPOs understand the information, evidence and organisational input required for an effective compliance exercise.
  • Address common challenges and misconceptions associated with CAR preparation and filing.
  • Provide practical guidance on identifying, organising and validating relevant compliance information and documentation.
  • Create a platform for expert engagement, enabling participants to ask questions and obtain clarification on specific CAR-related issues.
  • Promote accurate, meaningful and timely compliance reporting by organisations to the NDPC.

Who Should Attend?

The Masterclass is particularly relevant to:

  • Data Protection Officers (DPOs);
  • Privacy and data protection professionals;
  • Compliance and risk officers;
  • Legal and regulatory compliance professionals;
  • Representatives of organisations responsible for coordinating CAR submissions; and
  • Professionals who work with licensed DPCOs on data protection compliance activities.
03
NOV
Hacking Health: Confronting the Hidden Risks in Patient Data
03/11/2026
1:00 pm

A Workshop for Privacy and Security Professionals

Workshop Overview

This session equips privacy and security professionals with a practical understanding of how patient data moves through the healthcare ecosystem, where it's most exposed, and what legal and governance tools exist to protect it. Anchored by a real-world breach case study, the workshop moves from foundational context to actionable governance steps participants can implement in their own organisations.

03
NOV