Your estate’s visitor log and the NDPA 2023: a plain guide

A gate logbook doesn’t look like a data protection issue. It looks like a book. But every line in it is personal data: a name, often a phone number, sometimes an ID number, and a record of where that person went and when. Under the Nigeria Data Protection Act 2023, that matters.

This guide explains, in plain terms, what the Act expects and what it means at your gate. It isn’t legal advice; for your estate’s specific obligations, speak to a lawyer.

What the NDPA 2023 is

The Nigeria Data Protection Act 2023 is Nigeria’s main law on personal data. It applies to organisations that collect and use information about people, and it set up the Nigeria Data Protection Commission (NDPC) to oversee it. An estate or residents’ association that records residents and visitors is handling personal data, so the Act’s principles apply to how it does that.

The principles, applied to the gate

The Act is built on a handful of principles. Here’s what each one looks like at an estate gate.

Collect it for a clear purpose

Your purpose is security: knowing who is on the estate and who allowed them in. Use visitor details for that, not for anything unrelated.

Collect only what you need

Do you need a visitor’s ID number to let them visit a resident who invited them? Often not. A name, the house they’re visiting and the time is usually enough when the resident has already approved the visit. Collecting less means less to protect.

Keep it accurate

Illegible handwriting and guessed times are inaccurate records. A system that records the time of a scan, and which resident created the pass, is more reliable by design.

Don’t keep it forever

Decide how long your estate needs visitor records, write it down, and stick to it. Boxes of old logbooks in a store room don’t meet that standard.

Keep it secure and confidential

An open book on a guardhouse desk can be read, photographed or taken by anyone. Records should be visible only to the people whose role needs them: a guard needs today’s expected visitors, not a resident’s full history.

Be accountable

You should be able to show how you handle visitor data, and who did what. That is far easier when every action has a name and a time attached to it.

People’s rights

The Act gives people rights over their own information, including the right to know what is held about them, to have it corrected, and in some cases to have it deleted. A resident who asks “what do you record about my visitors?” deserves a clear answer, and your estate should have one ready.

A practical checklist for estate managers

• Write down why the gate records visitors, and share it with residents
• Stop collecting details you don’t need, such as ID numbers for invited guests
• Take personal details off the open desk
• Limit who can see records to the roles that need them
• Set and follow a retention period for visitor records
• Name someone to handle questions and requests about personal data
• Check that any gate system you use supports all of the above

Where a digital system helps

A good visitor system makes most of this checklist automatic. With VillaSafe, residents invite their own guests, so the gate checks a pass instead of copying details into a book. Each person sees only what their role needs. Passes expire on their own. Data travels encrypted, and every entry and admin action is logged with the person and the time. Read more on our trust and security page.

If you’d like to see how it would work for your estate, request a demo. Bring your exco’s questions about data; we’re happy to answer them.