The Nigeria Data Protection Commission (NDPC) mandates that contractors and consultants register as Data Controllers or Processors of Major Importance (DCPMI), especially if they handle a significant amount of personal data or operate in key sectors.
Who Needs to Register?
Contractors and consultants are typically required to register if they meet specific criteria, such as:
- Processing personal data of more than 200 data subjects within a six-month period.
- Operating in sectors critical to Nigeria’s economy and security (e.g., financial services, health, oil and gas, e-commerce, ICT services).
- Acting as agents or vendors who process data on behalf of other major organizations.
Registration Process
The registration is completed online through the official NDPC portal.
- Visit the portal: Go to the NDPC Information Management Portal (NIMP).
- Start application: Navigate to the “New Registration” or “Data Controller/Processor Registration” section.
- Fill form: Complete the online application form with all required information.
- Upload documents: Upload the necessary supporting documents (see requirements below).
- Pay fee: Pay the non-refundable registration fee through the designated payment gateway.
- Submit: Submit the completed application for review.
Required Documents
Required documents for registration include details such as CAC Registration, tax clearance, professional qualifications for staff, identification for a Director, and evidence of payment.
Fees and Deadlines
Registration fees vary based on data processing activity. Organizations classified as DCPMIs had a registration deadline.
For help with classification and registration, licensed Data Protection Compliance Organisations (DPCOs) can provide support
