Get Started
v5.5 — Now Available

NDPA Compliance
Made Beautiful

The complete React + TypeScript toolkit for Nigeria Data Protection Act 2023 and NDPC GAID 2025 compliance — ship consent, DSR, DPIA, and breach notifications in minutes, then gate it all in CI.

app/layout.tsx
tsx
// app/layout.tsx
import { NDPRProvider } from '@tantainnovative/ndpr-toolkit';
import '@tantainnovative/ndpr-toolkit/styles';

export default function RootLayout({ children }) {
  return (
    <NDPRProvider organizationName="MyApp">
      {children}
    </NDPRProvider>
  );
}
8
Compliance Modules
1,296
Passing Tests
0
Runtime Dependencies
18–19
React Versions
Quickstart

Full Compliance in 3 Files

Drop in three files and you have a consent banner, a privacy policy page, and a data request portal — all NDPA-compliant.

app/layout.tsx
tsx
// app/layout.tsx
import { NDPRProvider } from '@tantainnovative/ndpr-toolkit';
import '@tantainnovative/ndpr-toolkit/styles';

export default function RootLayout({ children }) {
  return (
    <html lang="en">
      <body>
        <NDPRProvider
          organizationName="Acme Corp"
          dpoEmail="privacy@acme.ng"
          ndpcRegistrationNumber="NDPC-2026-12345"
        >
          {children}
        </NDPRProvider>
      </body>
    </html>
  );
}
Modules

Everything Compliance Needs

Eight purpose-built modules covering every requirement of the Nigeria Data Protection Act 2023.

Core

Consent Management

Granular consent banners with audit trails, category management, and NDPA-compliant withdrawal flows.

Explore
Critical

Breach Notification

72-hour NDPC deadline tracking, breach severity triage, and a live notification-readiness panel scored against GAID 2025 Article 33.

Explore

DSR Portal

Pre-built portal for access, erasure, rectification, portability, and objection requests — ready in one import.

Explore

DPIA Toolkit

Questionnaire-driven risk assessments with severity scoring, mitigation tracking, and PDF export.

Explore

Privacy Policy

Interactive wizard generating NDPA-compliant privacy policies with custom sections and version history.

Explore

Lawful Basis

Document and manage legal grounds for each processing activity with purpose limitation checks.

Explore

Cross-Border Transfers

Safeguard evaluator for international data transfers with adequacy decisions and SCCs management.

Explore

ROPA Builder

Maintain your Record of Processing Activities with asset linking, controller mapping, and audit exports.

Explore
Architecture

Choose Your Layer

Use the high-level presets, drop down to composable components, or go full-headless with hooks and core utilities.

1
Presets
Drop-in components with zero config. Works out of the box.
2
Components
Composable, styled building blocks you control.
3
Hooks
Logic-only hooks — bring your own UI.
4
Core
Pure TypeScript utilities, framework agnostic.
5
Adapters
Swap storage backends: localStorage, Postgres, Redis.
tsx
// One import — fully styled, NDPA-ready
import { NDPRConsent } from '@tantainnovative/ndpr-toolkit/presets';

export default function App() {
  return (
    <NDPRConsent
      position="bottom"
      onSave={(settings) => console.log(settings)}
    />
  );
}
Compliance Score

Know Your Score

Run a real-time compliance audit against the NDPA 2023 framework and get an actionable breakdown of gaps.

73/ 100
Consent Management
DSR Portal
Privacy Policy
Breach Notification
DPIA
Lawful Basis
Cross-Border
ROPA
compliance-check.ts
ts
import { getComplianceScore } from '@tantainnovative/ndpr-toolkit';

const report = getComplianceScore({
  consent: { hasConsentMechanism: true, hasPurposeSpecification: true,
    hasWithdrawalMechanism: true, hasMinorProtection: false, consentRecordsRetained: true },
  dsr: { hasRequestMechanism: true, supportsAccess: true, supportsRectification: true,
    supportsErasure: true, supportsPortability: false, supportsObjection: true, responseTimelineDays: 30 },
  dpia: { conductedForHighRisk: true, documentedRisks: true, mitigationMeasures: false },
  breach: { hasNotificationProcess: true, notifiesWithin72Hours: true, hasRiskAssessment: true, hasRecordKeeping: true },
  policy: { hasPrivacyPolicy: true, isPubliclyAccessible: true, lastUpdated: '2026-01-15', coversAllSections: true },
  lawfulBasis: { documentedForAllProcessing: false, hasLegitimateInterestAssessment: false },
  crossBorder: { hasTransferMechanisms: false, adequacyAssessed: false, ndpcApprovalObtained: false },
  ropa: { maintained: false, includesAllProcessing: false, lastReviewed: '2025-11-01' },
});

// report.score → 0–100, report.rating → 'excellent' | 'good' | 'needs-work' | 'critical'
// report.modules → per-module breakdown with recommendations
73/100 overall score with letter grade
Per-module pass/fail breakdown
Actionable gap recommendations
Grades from A to F scale
NDPC GAID 2025

Register, Schedule, and Audit in CI

The GAID 2025 layer: classify your DCPMI registration tier, schedule Compliance Audit Returns, and check breach notifications — then gate it all in CI with the ndpr audit CLI.

ci.sh
bash
# Gate compliance in CI — exits non-zero on failure
npx ndpr audit --init           # scaffold ndpr.audit.json
npx ndpr audit --min-score 80

# NDPA 2023 Compliance Audit
# ✓ Overall compliance score        82/100 (good); minimum 80.
# ✓ DCPMI registration (GAID 2025)  UHL — ₦250,000/yr; file CAR annually.
# ! Breach notification — incident   60% complete; 18h remaining.
# Verdict: PASS
DCPMI registration classifier
Resolve your UHL / EHL / OHL tier and annual NDPC fee from data-subject volume.
Compliance Audit Returns scheduler
Initial-audit due date and the next annual NIMP filing deadline, with overrides.
Breach-notification checker
Score a breach against the Section 40 / Article 33 mandated content and the 72-hour clock.
ndpr audit — CI gate
One command scores everything and exits non-zero on failure. Drop it into any pipeline.
Open Source — MIT License

Ready to Ship Compliance?

One package, eight modules, zero excuses. Get NDPA-compliant in an afternoon.

$pnpm add @tantainnovative/ndpr-toolkit
Read the DocsBrowse Demos