Design the Data Privacy Compliance Toolkit for Nigerian MSMEs

The Nigeria Data Protection Act 2023 came into force making compliance mandatory for all organisations that process personal data of Nigerian citizens. The National Information Technology Development Agency estimates that over 90% of Nigerian SMEs are non-compliant. The consequences — fines of up to 2% of annual revenue — are real. But existing compliance resources are written for corporate legal teams, not for a shop owner who collected 500 customer phone numbers on a spreadsheet. Your challenge is to design a NDPA compliance toolkit for Nigerian SMEs with under 50 employees and annual revenue under ₦100 million. It must explain what data they hold and what they need to do about it, generate the required privacy notices and data processing documentation, and identify the minimum compliance steps they must take within 90 days. It must be understandable to a business owner with a secondary school education. Submit a toolkit design document (max 12 pages) including: the assessment process that maps what data an SME holds, the documentation templates generated, the 90-day compliance roadmap, how the toolkit is delivered (web, WhatsApp, or print), the language and readability design, and a plan to reach 50,000 SMEs in 12 months. Judging criteria: 35% practical usability for non-legal SME owners, 30% accuracy of legal compliance guidance, 20% documentation template quality, 15% reach plan.