Business · Nigeria
Comply with data protection (NDPA / NDPC)
Meet Nigeria Data Protection Act 2023 obligations: register with NDPC, appoint a Data Protection Officer, and (if processing 2,000+ data subjects/yr) file an annual Compliance Audit Report via a licensed DPCO.
3
3
Who you will deal with
The steps
- Register with the NDPC
- Nigeria Data Protection Commission (NDPC)
- Register (or renew) with the NDPC on its portal and confirm the entity's data controller/processor classification.
- Company details; processing description
- Registration stage
- Appoint a Data Protection Officer (DPO)
- Data Controller/Processor
- Appoint or confirm a DPO and register their details with the NDPC; assemble a data inventory, privacy policies, consent mechanisms and processing register.
- DPO details; data inventory; privacy policies
- Ongoing
- File the annual Compliance Audit Report (CAR)
- Licensed DPCO → NDPC
- Organisations processing 2,000+ data subjects in 12 months must engage a licensed Data Protection Compliance Organisation (DPCO) to audit and file the CAR with the NDPC by the annual deadline (15 March; extensions have applied).
- Compliance evidence; DPCO engagement
- Annual (by ~15 March)
Also in business
The numbers behind the decision
Knowing the process is half of it. ONYX also tracks the operating environment you are entering — daily grid generation, official FX, state-level input prices and inflation, and sector output — each figure source-linked and dated.