1. Statutory Authority & Lawful Basis for Processing
Under Section 25 of the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR), processing of data on the IReV-Sentinel platform is conducted pursuant to a Statutory Public Interest Task. Specifically, Section 64 of the Electoral Act 2022 empowers electoral authorities and citizen observers to authenticate polling unit results against electronic voter registers.
2. Observer Registration & Two-Factor OTP Protocol
Before an observer can upload an INEC Form EC8A sheet into the forensic audit pipeline, the platform mandates identity registration to maintain an auditable chain of custody.
- Full Legal Name: First Name, Middle Name, Surname.
- Mobile Phone Number: Dedicated destination for 6-digit SMS OTP verification.
- Official Email Address: Audit certificate delivery and tribunal verification notices.
- Accreditation Affiliation: Citizen Observer, Civil Society (e.g. Yiaga), Party Collation Agent, or Media.
Upload privileges are unlocked strictly upon successful entry of a time-limited (5-minute expiration) 6-digit cryptographic One-Time Password (OTP). Each authorized upload is immutably timestamped and attributed to the verified observer in the tamper-evident ledger block.
3. Public Instrument Status of Form EC8A Documents
INEC Form EC8A (Polling Unit Result Sheet) is by law a Statutory Public Record mandated by Section 60(5) of the Electoral Act 2022 to be publicly pasted at each polling unit upon conclusion of counting. Optical extraction of political party votes, voter turnout counts, and presiding officer signatures from Form EC8A does not infringe upon personal privacy, as these figures constitute public civic data.
4. Data Encryption & Strict Zero-Commercialization Guarantee
IReV-Sentinel Pro operates under a strict Zero-Commercialization Guarantee:
- No Data Monetization: Observer phone numbers and email addresses are never monetized, rented, sold, or shared with commercial marketing entities.
- Cryptographic Ingestion Hashing: Raw uploads are immediately digested into SHA-256 binary streams.
- Encrypted Database Storage: Observer records are stored in AES-256 encrypted volumes within Nigerian sovereign cloud boundaries.
5. Data Subject Rights Under NDPA 2023
As a registered observer or citizen user, you retain statutory rights under Section 34 of the Nigeria Data Protection Act 2023:
6. Data Protection Officer (DPO) Contact & Compliance Office
For inquiries regarding NDPR 2023 compliance, observer telemetry audit requests, or tribunal evidence certification, direct official correspondence to: