@tantainnovative/ndpr-toolkit

v3.2.1

Published

7 days ago

Nigeria Data Protection Toolkit — enterprise-grade compliance components for the Nigeria Data Protection Act (NDPA) 2023

@tantainnovative/ndpr-toolkit

Compliance infrastructure for the Nigeria Data Protection Act (NDPA) 2023

v3 ships zero-config presets, pluggable storage adapters, compound components, and a compliance score engine — eight production-ready modules covering consent, data subject rights, DPIA, breach notification, privacy policies, lawful basis, cross-border transfers, and ROPA.

Documentation | Live Demos | npm

The 3-File Quickstart

Three files. Full NDPA consent compliance.

app/layout.tsx

import { NDPRConsent } from '@tantainnovative/ndpr-toolkit/presets';

export default function RootLayout({ children }: { children: React.ReactNode }) {
  return (
    <html>
      <body>
        {children}
        <NDPRConsent />
      </body>
    </html>
  );
}

app/api/consent/route.ts

import { NextRequest, NextResponse } from 'next/server';

let store: unknown = null;

export async function GET() { return NextResponse.json(store ?? {}); }
export async function POST(req: NextRequest) {
  store = await req.json();
  return NextResponse.json({ ok: true });
}

Persist to your API instead of localStorage:

import { NDPRConsent } from '@tantainnovative/ndpr-toolkit/presets';
import { apiAdapter } from '@tantainnovative/ndpr-toolkit/adapters';

<NDPRConsent adapter={apiAdapter('/api/consent')} />

That's it. NDPA-compliant consent with server-side persistence in under 20 lines.

Install

pnpm add @tantainnovative/ndpr-toolkit

Install UI peer dependencies (only needed for styled components):

pnpm add @radix-ui/react-switch @radix-ui/react-tabs @radix-ui/react-label @radix-ui/react-slot lucide-react tailwind-merge clsx class-variance-authority

Or scaffold instantly with the CLI:

npx @tantainnovative/create-ndpr

Choose Your Layer

Pick exactly what your project needs.

Presets — zero-config

Drop-in components with sensible defaults. No configuration required.

import {
  NDPRConsent,           // Consent banner — works with zero props
  NDPRSubjectRights,     // DSR request form
  NDPRBreachReport,      // Breach report form
  NDPRPrivacyPolicy,     // Policy generator wizard
  NDPRDPIA,              // DPIA questionnaire
  NDPRComplianceDashboard, // Visual compliance dashboard
} from '@tantainnovative/ndpr-toolkit/presets';

Components — compound pattern

Full control over layout without rebuilding logic.

import { Consent } from '@tantainnovative/ndpr-toolkit/consent';

<Consent.Provider options={options} onSave={handleSave}>
  <div className="my-layout">
    <Consent.OptionList />
    <div className="flex gap-2">
      <Consent.AcceptButton />
      <Consent.RejectButton />
    </div>
  </div>
</Consent.Provider>

Hooks — headless

Stateful hooks for every module. Bring your own UI entirely.

import { useConsent } from '@tantainnovative/ndpr-toolkit/hooks';

const { hasConsent, acceptAll, rejectAll, shouldShowBanner } = useConsent({ options });

Core — no React

Pure TypeScript utilities and validators. Works anywhere — Node, edge functions, Deno.

import { validateConsent, getComplianceScore } from '@tantainnovative/ndpr-toolkit/core';

Adapters — pluggable storage

Swap where consent (and other state) is stored without changing any component code.

import { apiAdapter, localStorageAdapter, cookieAdapter } from '@tantainnovative/ndpr-toolkit/adapters';

Pluggable Storage

Every stateful component accepts an adapter prop. Built-in adapters ship out of the box.

import {
  localStorageAdapter,    // default for browsers
  sessionStorageAdapter,  // cleared on tab close
  cookieAdapter,          // server-readable cookies
  apiAdapter,             // HTTP endpoint (any backend)
  memoryAdapter,          // in-process, good for SSR / tests
  composeAdapters,        // fan-out writes to multiple stores
} from '@tantainnovative/ndpr-toolkit/adapters';

localStorage (default browser behaviour):

<NDPRConsent adapter={localStorageAdapter('ndpr_consent')} />

API endpoint:

<NDPRConsent adapter={apiAdapter('/api/consent', {
  headers: { Authorization: `Bearer ${token}` },
})} />

Write to API + keep a local cache:

import { composeAdapters, apiAdapter, localStorageAdapter } from '@tantainnovative/ndpr-toolkit/adapters';

<NDPRConsent adapter={composeAdapters(
  apiAdapter('/api/consent'),
  localStorageAdapter('ndpr_consent'),
)} />

Cookie (server-readable, for SSR consent gating):

<NDPRConsent adapter={cookieAdapter({ name: 'ndpr_consent', maxAge: 365 * 24 * 60 * 60 })} />

Compliance Score

getComplianceScore() evaluates your posture across all 8 NDPA modules and returns a 0–100 score with rated gaps and prioritised recommendations.

import { getComplianceScore } from '@tantainnovative/ndpr-toolkit/core';

const report = getComplianceScore({
  consent: {
    hasConsentMechanism: true,
    hasPurposeSpecification: true,
    hasWithdrawalMechanism: true,
    hasMinorProtection: false,
    consentRecordsRetained: true,
  },
  dsr: {
    hasRequestMechanism: true,
    supportsAccess: true,
    supportsRectification: false,
    supportsErasure: false,
    supportsPortability: false,
    supportsObjection: false,
    maxResponseDays: 30,
  },
  // ... other modules
});

console.log(report.score);         // e.g. 74
console.log(report.rating);        // "good" | "excellent" | "needs-work" | "critical"
console.log(report.recommendations[0].priority); // "critical"

Render a live dashboard:

import { NDPRComplianceDashboard } from '@tantainnovative/ndpr-toolkit/presets';

<NDPRComplianceDashboard
  input={complianceInput}
  showRecommendations
  maxRecommendations={5}
/>

Backend Integration

CLI scaffolder

Scaffold a complete wiring for your stack in seconds:

npx @tantainnovative/create-ndpr

Detects Next.js (App Router or Pages Router) or Express, prompts for your ORM (Prisma / Drizzle / none), and generates API routes, schema, and layout files — no manual copy-pasting.

Backend recipes

@tantainnovative/ndpr-recipes is a reference implementation with production-ready patterns:

| Recipe | What you get | |--------|-------------| | prisma/schema.prisma | All 5 NDPA compliance tables | | src/adapters/prisma-consent.ts | Prisma StorageAdapter<ConsentSettings> | | src/adapters/drizzle-consent.ts | Drizzle StorageAdapter<ConsentSettings> | | src/nextjs/app-router/ | Consent, DSR, Breach, ROPA, compliance route handlers | | src/express/ | Full NDPR router with consent, DSR, breach, ROPA routes | | src/nextjs/app-router/middleware.ts | Next.js consent gate middleware |

Copy the files you need into your project. Browse the recipes →

All 8 Modules

| Module | Import path | NDPA reference | Key exports | |--------|-------------|----------------|-------------| | Consent Management | /consent | Sections 25–26 | ConsentBanner, ConsentManager, Consent.*, useConsent | | Data Subject Rights | /dsr | Part IV §29–36 | DSRRequestForm, DSRDashboard, useDSR | | DPIA | /dpia | Sections 38–39 | DPIAQuestionnaire, DPIAReport, useDPIA | | Breach Notification | /breach | Section 40 | BreachReportForm, BreachRiskAssessment, useBreach | | Privacy Policy | /policy | Sections 27–28 | PolicyGenerator, PolicyPreview, PolicyExporter | | Lawful Basis | /lawful-basis | Section 25 | LawfulBasisTracker, useLawfulBasis | | Cross-Border Transfers | /cross-border | Part VI §41–45 | CrossBorderTransferManager, useCrossBorderTransfer | | ROPA | /ropa | Section 28(2) | ROPAManager, useROPA, exportROPAToCSV |

Styling & Customization

Every component supports three modes:

Default (Tailwind CSS):

<ConsentBanner options={options} onSave={handleSave} />

Override specific sections:

<ConsentBanner
  options={options}
  onSave={handleSave}
  classNames={{
    root: "fixed bottom-0 inset-x-0 bg-white shadow-xl p-6",
    acceptButton: "bg-green-600 text-white px-6 py-2 rounded-full",
  }}
/>

Fully unstyled (BYO CSS — Bootstrap, CSS Modules, vanilla):

<ConsentBanner
  options={options}
  onSave={handleSave}
  unstyled
  classNames={{
    root: "my-consent-banner",
    acceptButton: "btn btn-primary",
  }}
/>

Each component exports its ClassNames TypeScript interface for autocomplete. Full reference in the docs.

Available Import Paths

| Path | What you get | Dependencies | |------|-------------|--------------| | . (default) | Everything | All peer deps | | /core | Types + utility functions | tslib | | /hooks | React hooks for all 8 modules | react | | /presets | Zero-config preset components | react, Radix, Tailwind | | /adapters | Storage adapters | none | | /consent | Consent components + Consent.* compound API | react, Radix, Tailwind | | /dsr | DSR components + hook | react, Radix, Tailwind | | /dpia | DPIA components + hook | react, Radix, Tailwind | | /breach | Breach components + hook | react, Radix, Tailwind | | /policy | Policy components + hook | react, Radix, Tailwind, jspdf | | /lawful-basis | Lawful basis component + hook | react, Radix, Tailwind | | /cross-border | Cross-border component + hook | react, Radix, Tailwind | | /ropa | ROPA component + hook | react, Radix, Tailwind | | /unstyled | Unstyled consent primitives | react |

NDPA 2023 Overview

The Nigeria Data Protection Act (NDPA) 2023 replaced the NDPR 2019 and established the Nigeria Data Protection Commission (NDPC) as the independent regulatory body.

| Aspect | NDPR (2019) | NDPA (2023) | |--------|-------------|-------------| | Legal status | NITDA regulation | Act of the National Assembly | | Regulator | NITDA | NDPC (independent commission) | | Enforcement | Limited | Independent investigation and penalty powers | | Data subject rights | 6 rights | 8 rights (added information + automated decision-making) | | Cross-border transfers | Basic provisions | Comprehensive framework with adequacy decisions | | Breach notification | 72 hours to NITDA | 72 hours to NDPC (Section 40) | | DPIA | Recommended | Required for high-risk processing (Section 38) |

TypeScript

Written in TypeScript. All types are exported:

import type {
  // Consent
  ConsentOption, ConsentSettings,
  // DSR
  DSRRequest, DSRType, DSRStatus,
  // DPIA
  DPIAQuestion, DPIASection, DPIAResult,
  // Breach
  BreachReport, BreachCategory, RiskAssessment,
  // Policy
  PolicySection, PolicyTemplate, PrivacyPolicy,
  // Lawful Basis
  LawfulBasis, ProcessingActivity,
  // Cross-Border
  CrossBorderTransfer, TransferMechanism,
  // ROPA
  ProcessingRecord, RecordOfProcessingActivities,
  // Compliance score
  ComplianceInput, ComplianceReport, ComplianceRating,
  // Storage
  StorageAdapter,
} from '@tantainnovative/ndpr-toolkit/core';

Contributing

Contributions are welcome. Please read the Contributing Guide before submitting a pull request.

License

MIT

Author

Abraham Esandayinze Tanta — Software Engineer & Data Protection Compliance Specialist

GitHub: @mr-tanta
LinkedIn: mr-tanta
Organization: Tanta Innovative

Published

Vulnerabilities

Links

Maintainers

Keywords

Readme

@tantainnovative/ndpr-toolkit

The 3-File Quickstart

Install

Choose Your Layer

Presets — zero-config

Components — compound pattern

Hooks — headless

Core — no React

Adapters — pluggable storage

Pluggable Storage

Compliance Score

Backend Integration

CLI scaffolder

Backend recipes

All 8 Modules

Styling & Customization

Available Import Paths

NDPA 2023 Overview

TypeScript

Contributing

License

Author