2026 Data Protection Africa Summit

Masterclasses

The Masterclass Series is one of the most anticipated features of the Data Protection Africa Summit (DPAS). These sessions go beyond theory, offering participants practical, in-depth learning experiences in data protection, privacy, and cybersecurity.

Guided by leading practitioners and subject-matter experts, the masterclasses are designed to equip participants with real-world tools to navigate emerging trends, regulatory demands, and implementation challenges.

Data Protection Impact Assessment (DPIA) - English & French Session Avaliable
03/11/2026
1:00 pm

Tthe Africa Digital Rights Hub (ADRH) is organizing a masterclass training on Data Protection Impact Assessment (DPIA) for DPCO’s. This training is designed to equip participants with the knowledge and skills necessary to conduct DPIAs, a critical tool for ensuring compliance with data protection regulations and mitigating risks associated with the processing of personal data.
---
Objectives of the Masterclass
1. To provide participants with a comprehensive understanding of what a Data Protection Impact Assessment (DPIA) entails.
2. To highlight the importance of DPIAs in identifying and mitigating risks associated with data processing activities.
3. To equip participants with practical skills for conducting DPIAs in compliance with data protection laws and regulations.
---
Format and Structure
The masterclass will be a 3-hour interactive session delivered via Zoom. It will include:
- Expert-led presentations on the fundamentals of DPIAs.
- Case studies and practical examples to illustrate the DPIA process.
- Q&A session to address participants' questions and concerns.

03
NOV
Compliance Audit Returns (CAR)
03/11/2026
1:00 pm

Building DPO Capacity for Effective Compliance Reporting

The Nigeria Data Protection Commission (NDPC) is organising an expert-led Masterclass on Compliance Audit Returns (CAR) designed to strengthen the capacity of Data Protection Officers (DPOs) and other relevant data protection professionals to understand, prepare, review and effectively manage the Compliance Audit Returns process.

Understanding Compliance Audit Returns

Compliance Audit Returns (CAR) are formal returns submitted by organisations to the Nigeria Data Protection Commission to demonstrate their level of compliance with applicable data protection requirements. The process provides an important mechanism for organisations to assess their data protection practices, identify compliance gaps and provide the Commission with information necessary for regulatory oversight.

For many organisations, however, the CAR process presents practical challenges. DPOs may have responsibility for coordinating their organisation's data protection compliance but may not always have sufficient technical or practical knowledge of the requirements, methodology and documentation necessary to properly undertake the CAR process.

This is particularly important because organisations may engage Data Protection Compliance Organisations (DPCOs) licensed by the NDPC to provide professional support in data protection compliance activities, including assistance with the preparation and filing of Compliance Audit Returns. Effective compliance therefore requires DPOs to understand not only their own responsibilities but also how to work effectively with DPCOs, provide the necessary organisational information and critically review the compliance documentation and returns prepared with their support.

About the Masterclass

The NDPC Masterclass on Compliance Audit Returns (CAR) provides a practical and interactive learning environment where participants will learn directly from experts on the CAR process.

The Masterclass will go beyond a theoretical explanation of CAR. It will provide participants with practical guidance on how to approach the process, understand the information required, identify relevant compliance evidence, engage effectively with DPCOs and address common challenges that arise during the preparation and submission of returns.

Participants will also have the opportunity to engage directly with the experts, ask questions and seek clarification on areas of the CAR process that may be unclear or challenging in practice.

Objectives of the Masterclass

The Masterclass seeks to:

  • Build practical understanding of the Compliance Audit Returns process and its regulatory purpose.
  • Equip DPOs with the knowledge required to effectively coordinate their organisation's CAR process.
  • Clarify the roles and responsibilities of organisations, DPOs and licensed DPCOs in the preparation and submission of CAR.
  • Improve collaboration between DPOs and DPCOs by helping DPOs understand the information, evidence and organisational input required for an effective compliance exercise.
  • Address common challenges and misconceptions associated with CAR preparation and filing.
  • Provide practical guidance on identifying, organising and validating relevant compliance information and documentation.
  • Create a platform for expert engagement, enabling participants to ask questions and obtain clarification on specific CAR-related issues.
  • Promote accurate, meaningful and timely compliance reporting by organisations to the NDPC.

Who Should Attend?

The Masterclass is particularly relevant to:

  • Data Protection Officers (DPOs);
  • Privacy and data protection professionals;
  • Compliance and risk officers;
  • Legal and regulatory compliance professionals;
  • Representatives of organisations responsible for coordinating CAR submissions; and
  • Professionals who work with licensed DPCOs on data protection compliance activities.
03
NOV
Hacking Health: Confronting the Hidden Risks in Patient Data
03/11/2026
1:00 pm

A Workshop for Privacy and Security Professionals

Workshop Overview

This session equips privacy and security professionals with a practical understanding of how patient data moves through the healthcare ecosystem, where it's most exposed, and what legal and governance tools exist to protect it. Anchored by a real-world breach case study, the workshop moves from foundational context to actionable governance steps participants can implement in their own organisations.

03
NOV
Understanding and Securing Agentic AI
03/11/2026
1:00 pm

AI agents are already handling customer data in banks, telcos and government services, and most organisations can't say how many they run or what those agents can reach. This four-hour masterclass starts with the fundamentals: what an agent is, how it differs from a chatbot, and how it uses tools, data and permissions to act on its own. From there, security and data protection leaders work together on governing them: inventory them, give each one an owner and a purpose, and know what to demand from vendors. Participants leave understanding how agents work and with a practical plan they can start without new budget.

03
NOV
GSMA’s Trust, Safety and Security Masterclass
03/11/2026
1:00 pm

Global and regional context

In 2024, the U.K Information Commissioner’s Office (ICO) released practical guidance emphasising data protection should not be an excuse when tackling fraud and scams, as its crime rates increase. Japan’s Personal Information Protection Commission (PPC) and the Financial Services Agency (FSA) have released guidance clarifying the rules on data sharing in the financial sector for fraud and scams prevention. In the African continent, Mobile Network Operators (MNOs) deploy anti-fraud Application Programme Interfaces (APIs), advocate for regional adoption highlighting the importance of confidentiality of communications and reiterate the vital role of innovative technologies as an enabler to preserving trust, safety and security.

Drawing insights from the GSMA’s Policy and regulation team engagement in Mobile World Congress (MWC) Barcelona, and Africa, Global Privacy Assembly (GPA), Network of African National Data Protection Authorities (NADPA-RAPDP) conference, capacity building and advocacy workshops with African Central Banks and Telecommunications Regulators, the GSMA will lead an interactive Masterclass focussing on smart data privacy laws implementation uses cases, cross-border data flows in the mobile money ecosystem, innovative fraud and scams prevention solutions by MNOs, emerging themes in AI and cross-regulatory collaboration.   

Objectives

  • To highlight key learnings from the GSMA Smart Implementation of Data Privacy Laws report
  • To demonstrate the importance of technology-neutral, and flexible regulatory frameworks that balance data protection with mobile innovation
  • To present the GSMA Open Gateway use cases (SIM swap and Number verification APIs), latest progress and support advancement in Africa
  • To walk through emerging themes in AI and mobile money scams prevention use cases
  • To amplify cross-regulatory collaboration, regulatory sandboxes and responsible innovation

 

Masterclass Leaders

Tooba Kazmi, Senior Manager, Consumer Policy, GSMA; Noriswadi Ismail (Noris Ismail), Senior Director, Data Privacy, Policy and Regulation

Supported by the GSMA team: Roger Dickens, Senior Marketing Manager, GSMA; Philippe Goagba, Senior Policy Manager, Sub-Saharan Africa, GSMA; Nzau Muinde, Public Policy Manager, Inclusive Digital Finance, GSMA

 

Resources

GSMA Mobile Policy Handbook

GSMA Digital Africa Index

Driving the GSMA Nigeria Digital Economy Report – The role of mobile technology in driving the digital economy in Nigeria

GSMA Smart Implementation of Data Privacy Laws report

Evolution of the Mobile Money Regulatory Index

Navigating Mobile Money Regulatory Risks

GSMA Open Gateway Portal

Privacy by Design: How GSMA Open Gateway is building trust into the API economy

Digital Public Infrastructure and GSMA Open Gateway: Enabling Digital Transformation at Scale

GSMA United Against Scams – Scams Policy Overview, Scams Call to Action, Fraud and Scams Safety report, and Anatomy of a Scam video

GSMA Welcomes Abuja Declaration for Africa and Joins Partners to Launch ATLAS Umoja

UNDP and GSMA partner to scale African-led AI innovation

African Tongues and Languages at Scale (ATLAS)

The Impact of Cybersecurity Regulation on Mobile Operators

GSMA Capacity Building

 

 

 

 

 

03
NOV
Communications – (SIM registration, Location tracking, Metadata governance, Mobile advertising, Government access request)
03/11/2026
1:00 pm
03
NOV