← Back to home
Resources
Nigerian healthcare compliance glossary
Plain-English summaries of the regulations, agencies, and concepts a Nigerian hospital encounters when implementing a hospital management system. Source-linked where canonical references exist.
Regulation
NDPR
RegulationNigeria Data Protection Regulation 2019
- The earlier data-protection regulation issued by NITDA in 2019, since largely superseded by the Nigeria Data Protection Act 2023. Many hospital documents and contracts still reference NDPR by name; the operational requirements (consent, audit trails, role-based access, breach notification) carry forward into the 2023 Act. Treat NDPR and NDPA together when scoping a hospital management system's compliance posture. Source.
NDPA
RegulationNigeria Data Protection Act 2023
- Primary national data-protection law signed in June 2023, replacing the NDPR as the highest-level instrument. Applies to any organisation that processes the personal data of people in Nigeria, including hospitals. Requires lawful basis for processing, role-based access to sensitive data (such as health records), maintained audit logs, breach notification to the NDPC within 72 hours, and appointment of a Data Protection Officer for hospitals processing significant volumes. Source.
National Health Act 2014
RegulationNHA 2014
- Primary federal legislation governing the structure and financing of Nigeria's health system. Establishes the BHCPF, codifies citizens' rights to access health services, defines record-keeping obligations for hospitals (including retention periods and confidentiality), and sets the framework around which NHIA, NPHCDA, and state-level agencies operate. Source.
Body
NHIA
BodyNational Health Insurance Authority
- Federal regulator of Nigeria's health insurance system, established by the NHIA Act 2022 (which repealed the older NHIS Act 1999). Mandates compulsory health insurance for every Nigerian, sets accreditation requirements for HMOs and health-care facilities, and publishes the digital channels used for claims submission. Hospital management systems that bill HMOs route claims through NHIA-defined formats and codes. Source.
NDPC
BodyNigeria Data Protection Commission
- Independent regulator created by the NDPA 2023 to enforce data-protection compliance and replace NITDA's earlier data-protection mandate. Issues registration requirements for Data Controllers and Processors of Major Importance (hospitals typically qualify), publishes guidance, and handles breach notifications and investigations. Source.
HEFAMAA
BodyHealth Facility Monitoring and Accreditation Agency
- Lagos State agency responsible for licensing and inspecting private health facilities operating in Lagos. Conducts annual inspections, issues operating permits, and enforces minimum standards for record-keeping, staffing, equipment, and patient safety. Equivalent agencies exist in other states under varying names (for example, Kaduna State Primary Healthcare Development Agency). A hospital management system's audit-log capability is increasingly checked during HEFAMAA inspections. Source.
MDCN
BodyMedical and Dental Council of Nigeria
- Statutory body that regulates the medical and dental professions in Nigeria. Maintains the register of licensed practitioners, sets ethical and professional standards, and prosecutes professional misconduct. A hospital's HMS should integrate the MDCN folio number of each clinician into clinician records so signatures on consultations, prescriptions, and certificates are traceable to a licensed practitioner. Source.
NAFDAC
BodyNational Agency for Food and Drug Administration and Control
- Federal agency that regulates the manufacture, importation, distribution, and use of food, drugs, cosmetics, and medical devices in Nigeria. Pharmacy modules of a hospital management system must record NAFDAC registration numbers for each medication dispensed and respect NAFDAC's controlled-drugs schedule for handling restrictions. Source.
NPHCDA
BodyNational Primary Health Care Development Agency
- Federal agency responsible for coordinating primary health care across Nigeria, including the Basic Health Care Provision Fund and PHCUOR strategy. Sets minimum standards for primary health-care centres, runs national immunisation programmes, and publishes the data-reporting requirements that PHCs feed into. Source.
NCDC
BodyNigeria Centre for Disease Control
- Federal public-health agency responsible for surveillance, outbreak response, and public-health emergencies. Hospitals report notifiable diseases (cholera, Lassa fever, meningitis, and emerging threats) through NCDC's Integrated Disease Surveillance and Response (IDSR) channels. A modern HMS streamlines IDSR reporting by structuring diagnosis fields against NCDC's case definitions. Source.
NIMC
BodyNational Identity Management Commission
- Federal agency that issues and manages the NIN system. Provides verification APIs that allow regulated industries (banks, telecoms, increasingly health) to validate NIN-to-person matches. Hospital management systems should plan for direct NIMC NIN verification ahead of formal NHIA requirement, both to clean their patient master index and to prevent identity fraud in claims. Source.
HMO
BodyHealth Maintenance Organisation
- Private companies licensed by NHIA to provide health insurance coverage and manage claims between covered patients and accredited health-care providers. Major HMOs include Hygeia, Avon, Reliance, IHMS, and Total Health Trust. Each HMO has its own authorisation, claim, and reimbursement workflow, but all operate under NHIA's structural rules. HMS billing modules need to support multi-HMO claim packets, each in the HMO's expected format. Source.
WHO AFRO
BodyWorld Health Organization Regional Office for Africa
- WHO regional office for the African continent. Publishes regional standards and guidelines that increasingly inform Nigerian Ministry of Health policy, particularly around digital health, disease surveillance, and antimicrobial resistance reporting. Most hospital-level HMS requirements derive from federal Nigerian regulation but WHO AFRO guidelines influence the direction of travel. Source.
Programme
BHCPF
ProgrammeBasic Health Care Provision Fund
- Fund created under the National Health Act 2014 to provide a basic minimum package of health services to all Nigerians at the primary health-care level. Channelled through NHIA, NPHCDA, and state health-care contributory schemes. Hospitals participating in BHCPF gateways report patient-level data on services delivered through the platform-managed identifiers. Source.
NSHIP
ProgrammeNigeria State Health Investment Project
- World Bank-supported programme that funds performance-based financing of primary and secondary health care in participating Nigerian states. Hospital-level reporting and digital data capture are increasingly part of qualifying for NSHIP disbursements.
PHCUOR
ProgrammePrimary Health Care Under One Roof
- NPHCDA strategy that integrates the management of primary health care services under a single state agency in each state, replacing the fragmented earlier model. Hospitals operating at primary-care level need to report into the state PHC agency under PHCUOR; the HMS data layer should support the indicator definitions used by NPHCDA's DHIS2 deployment.
Identifier
NIN
IdentifierNational Identification Number
- 11-digit unique identifier issued by NIMC to every Nigerian and legal resident. Increasingly required as the canonical patient identifier in NHIA claims and health-care registrations. A hospital management system should store the NIN encrypted at rest and in transit, only decrypt at the point of use, and verify against NIMC when access becomes available. Plain-text NIN storage is a clear NDPA compliance risk. Source.
Concept
Tertiary care
Concept- The third level of Nigeria's health-care delivery structure, covering federal medical centres, teaching hospitals, and specialist hospitals. Tertiary facilities handle complex referrals from secondary and primary care, undertake teaching and research, and operate under federal and state oversight. HMS deployments in tertiary care need richer specialty modules (theatre management, intensive care, oncology workflows) than in primary care.
Secondary care
Concept- The second level of Nigeria's health-care delivery structure, covering general hospitals, comprehensive health centres, and most private hospitals. Provides specialist outpatient and inpatient services and acts as the bridge between PHCs and tertiary facilities. The bulk of private-hospital HMS deployments in Nigeria sit at this level.
- The first level of Nigeria's health-care delivery structure, covering primary health-care centres (PHCs) and community-based facilities. Coordinated by NPHCDA under the PHCUOR strategy. Primary-care HMS requirements emphasise immunisation tracking, maternal and child health indicators, and DHIS2-compatible reporting more than billing complexity.
Summaries on this page are educational and not legal advice. Nigerian regulations change; verify the obligations that apply to your facility with qualified counsel or the relevant agency before acting.