In 2026, the Nigeria Data Protection Commission (NDPC) requires certain organizations to register as Data Controllers or Processors of Major Importance (DCPMI). The cost and requirements vary based on the size and nature of your business.
Registration Costs
The fee is determined by the classification of the organization:
- Major Data Controller/Processor: ₦250,000.
- Regular Data Controller/Processor: ₦100,000.
- Small Business (<40 staff & <₦50m turnover): ₦25,000.
- Government or Public Entity: Free.
- Minor Processing (MDP-OHL): ₦10,000 for entities handling lower volumes but sensitive risks.
Registration Requirements
To register through the NDPC Portal, you must provide:
- Business Details: Name, address, and Corporate Affairs Commission (CAC) Registration number.
- DPO Information: Name, address, and contact details of your designated Data Protection Officer (DPO).
- Personnel Docs: Valid ID of a Director and qualifications for at least two staff members.
- Data Profile: Description of the personal data collected, number of data subjects, and purposes for processing.
- Technical Measures: A general description of security safeguards and mechanisms used to protect data.
- Security: Evidence of a website registered under a .ng domain.
Steps to Register
- Create an Account: Visit the NDPC portal and register your organization.
- Select Role: Choose whether you are a Data Controller or Processor (Major, Regular, or Small).
- Upload Documents: Submit your CAC certificate, DPO appointment letter, and proof of expertise.
- Payment: Pay the prescribed fee online via the designated gateway.
Are you registering a new startup or an established organization, so I can help you determine which fee category you fall into?
AI responses may include mistakes. For legal advice, consult a professional. Learn more
