NDPA 2023, enforced
Ethics and privacy
The compliance work most software leaves to a policy document, done by the software before it lets you collect anything.
Nigerian research is now governed by the Nigeria Data Protection Act 2023, and a university ethics committee will ask what happens to respondent data. ZStat answers with mechanisms rather than promises.
What you can do
A purpose in your own words, shown before any question, recorded with a digest of the exact wording that was agreed to.
Tested before you launch, not described in a paragraph. The data is deleted; the fact of the deletion is kept.
A number of months, turned into an actual date, enforced by a scheduled job that deletes what is past it.
Who ran what, when, on which data. Append-only, enforced by the database rather than by the application.
Generated from the running installation, downloadable as Word for a procurement file - including a section on what is not true.
What it refuses
- Collection with any of twelve conditions unmet, whatever the deadline.
- Deleting an analysis record to hide that an n changed. Withdrawals are explained, not erased.
- Claiming encryption that does not exist. Respondent codes are pseudonymous but stored in plain text, and the assurance pack says so.