Our Compliance Commitment
MyTurn Health operates as a fully integrated healthcare infrastructure provider, strictly adhering to the National Health Insurance Authority (NHIA) Act 2022, the Nigeria Data Protection Act 2023 (NDPA), and the regulatory directives of the National Agency for Food and Drug Administration and Control (NAFDAC) and the Pharmacists Council of Nigeria (PCN).
Our platform is designed for maximum clinical integrity and financial transparency, ensuring that every transaction within our ecosystem meets the highest standards of Nigerian and international law.
Governing Statutory Framework
MyTurn Health is licensed, registered, or operating in compliance with the following Nigerian regulatory regimes:
Data Protection
Nigeria Data Protection Act 2023 (NDPA) · NDPC governance.
Drug Regulation
NAFDAC 2026 · GS1 traceability · recall broadcast.
Pharmacy Practice
PCN Act 2022 · Electronic Pharmacy Regulations 2026.
Health Insurance
NHIA Act 2022 · HMO claim adjudication.
Payments
Central Bank of Nigeria (CBN) regulatory directives.
Consumer Protection
FCCPC digital-economy directives.
Practitioner Licensing
Medical & Dental Council of Nigeria (MDCN) standards.
Innovation Framework
Nigeria Startup Act 2022.
Data Residency & Patient Privacy
Patient health information and personally identifiable data collected through MyTurn services are retained on-soil in Nigeria, consistent with NDPA 2023 data-residency requirements. MyTurn does not export unmasked Nigerian patient data to foreign jurisdictions.
Patients retain all rights granted under the Patient Bill of Rights, including the right to access, correct, and request deletion of their personal information. Data subject access requests are handled by our Data Protection Officer within statutory response windows.
Clinical & Operational Integrity
Every medicine dispensed through the MyTurn network is verified against regulator-maintained authenticity registries. Cold-chain integrity is monitored continuously. Prescribers, dispensers, and providers are credentialed against the appropriate professional councils before they can act on the platform.
MyTurn maintains an internal compliance organisation with standing quarterly drill cadence across physical, digital, and regulatory incident categories.
Business Conduct & Ethics
MyTurn Health, its employees, and its counterparties are bound by a written code of ethics covering anti-bribery and anti-corruption, conflicts of interest, fair dealing with patients and providers, and responsible use of clinical and financial data. Breaches are investigated by the internal compliance organisation and, where warranted, reported to the relevant regulator.
Contact & Requests
Privacy inquiries & data subject rights
Requests under the Nigeria Data Protection Act 2023 — including access, correction, and deletion of personal data — are handled by our Data Protection Officer. Every request is logged and acknowledged within the statutory response window.
How to send a request:
- Email the Data Protection Officer at privacy@myturnhealth.com
- Include your full name, the service you used (MTDA patient app, Turn-Clinic, Turn-PMS, etc.), and the nature of your request
- You will receive a tracking reference within 48 hours
Regulatory correspondence
Licensed Nigerian regulators with jurisdiction over MyTurn's operations — NDPC, NAFDAC, PCN, NHIA, CBN, FCCPC, MDCN, NITDA, and FIRS — may reach our compliance office.
How to reach us:
- Email the compliance office at compliance@myturnhealth.com
- Formal notices should be directed to the registered office of the relevant MyTurn entity
- Include a regulator reference where applicable so we can route internally
Security disclosure
Security researchers are invited to disclose vulnerabilities responsibly. We operate a coordinated disclosure policy with acknowledgement within one business day and a good-faith safe harbour for researchers who follow the policy.
How to disclose:
- Email the security team at security@myturnhealth.com
- Use a descriptive subject line; include reproduction steps, impact assessment, and your preferred response channel
- Do not access data beyond what is necessary to demonstrate the issue, and do not publish findings until we have coordinated a fix
Partnership inquiries
Healthcare providers, pharmaceutical manufacturers, payers, and technology integrators can reach our partnerships team to discuss onboarding, certification, and commercial terms.
Contact: partnerships@myturnhealth.com