How To Get NDPC License in Nigeria: Registration Checklist

Data is like oxygen, without actively collecting and analyzing data, companies will struggle. As companies increasingly collect, process, and store personal data, compliance with Nigeria’s data protection laws has become a legal and commercial necessity. In this guide, you will discover how to apply and get NDPC license in Nigeria, registration requirements and license fee

The Nigeria Data Protection Commission (NDPC) regulates data privacy and ensures that organizations handling personal information comply with the Nigeria Data Protection Act (NDPA) 2023.

Organizations that intend to provide professional data protection compliance, auditing, consulting, and advisory services are required to obtain an NDPC license as a Data Protection Compliance Organization (DPCO).

A few days ago, a good friend of mine posted on His Facebook page, celebrating himself for having become a licensed DPO in Nigeria. Such a smart decision for him. I personally reached out to him to congratulate him for such engagement

Seeing someone like him from my community evolving to the point of becoming a licensed DPO in Nigeria shows that there is an opportunity for those who want to get license but are facing challenges.

Becoming a licensed DPCO like Solomon Yateghtegh not only establishes credibility but also allows your organization to legally assist businesses in meeting their data protection obligations.

In this comprehensive guide, you’ll learn how to get an NDPC license in Nigeria, the eligibility requirements, required documents, registration checklist, application process, costs, compliance obligations, and frequently asked questions to help you complete your application successfully.

About Nigeria Data Protection Commission (NDPC)

The Nigeria Data Protection Commission (NDPC) is the statutory and regulatory body of the Federal government of Nigeria saddled with the responsibility of regulating how data of Nigerian citizens are collected, shared, kept confidential while engaging in business activities

Functions of NDPC

• Safeguard the rights of natural persons to data privacy
• Enforcing the Data Protection Act
• Promote data processing practices that safeguard the security of personal data and privacy of data subjects;
• Strengthen the legal foundations of the national digital economy and guarantee the participation of Nigeria in the regional and global economies through the beneficial and trusted use of personal data.
• Punish offenders of data collection and protection Act
• Issuance of licensing and permits for DPCOs to operate

Services Offered By NDPC

• Registration, licensing and regulation of Data Protection And Compliance Officer (DPCOs)
• Privacy breaching reporting, investigation and punishment
• Registration of Data Controllers and Processors
• Auditing
• Data protection training and awareness services

What is an NDPC License

An NDPC License is an official permit and approval issued by the Nigeria Data Protection Commission.

It certifies that your company is registered as a Data Controller or Data Processor of Major Importance, enabling you to engage in handle customer or employee personal data in compliance with the Nigeria Data Protection Act (NDPA).

What is a Data Protection Compliance Organization (DPCO)?

A Data Protection Compliance Organization (DPCO) is simply a company that has secured licensed from NDPC to conduct external privacy audits, provide consulting, and train staff on data protection laws.

Difference Between DPO and DPCO

A Data Protection Officer (DPO) is an individual that has acquired the relevant knowledge, skills, and experience in privacy compliance practices in Nigeria

Such a person must also be certified to practice.

In other words, an individual can become a certified DPO like my Friend Solomon Yateghtegh above

On the other hand, a Data Protection Compliance Organization (DPCO) is an institution licensed to carry out privacy compliance services under relevant provisions of Nigeria’s data protection and privacy laws.

Only companies can become DPCOs. These may include law firms, audit firms, or IT companies.

In summary:

• A DPO is a qualified person
• A DPCO is a licensed company

None is superior to another, but they must work together to deliver full compliance support

Who Needs an NDPC License in Nigeria?

The following organizations need to first apply for the Nigerian Data Protection (NDPC) license to operate legally

• Data protection consulting firms
• IT consulting companies
• Cybersecurity firms
• Audit firms
• Legal firms
• Compliance consulting firms
• Risk management firms
• Corporate advisory firms
• Law firms
• Accounting firms
• Telecommunication companies (they must also apply for NCC license)

In addition, NDPC requires professional qualification or certification in any of the following fields

• Data Science
• Data Protection and privacy
• Information Privacy
• Information Audit
• Data Management
• Information security
• Data protection legal services
• Information Technology Due Diligence
• EU GDPR implementation and compliance
• Cybersecurity/Cybersecurity law
• Data Analytics
• Data Governance

Benefits of Obtaining an NDPC License

Securing an NDPC license in Nigeria isn’t just about registration, having this permit gives you so many advantages which includes the following

• Legal recognition: It gives your organization an identity that helps you build trust and credibility
• Increased credibility: Credibility in business is such a big intangible asset that could either build or destroy a business if taken for granted
• Access to corporate clients: Securing NDPC License lets you work with both local and international clients all over the world
• Government contracts: Your organization can be able to secure government contracts and offer services for public sector MDAs
• New revenue opportunities: More clients and strong credibility results to high revenue

Eligibility Requirements for NDPC License

To be eligible, you must have the following

• Registered Company with CAC with annual returns filed up to date
• Qualified personnel
• Data protection expertise
• Operational Office address
• Professional competence and certification in relevant areas
• Ethical standards
• Organizational structure

Documents Required for NDPC License Application

• All CAC Registration documents
• Evidence of Tax Clearance
• Company profile
• Utility bill
• EFCC Anti Money Laundering Certificate
• Relevant professional or academic qualification of at least 2 listed staff (these need not be Directors)
• Valid means of identification of one Director i.e. International Passport; Drivers’ License; NIN Registration etc.
• Website registration on .ng domain
• Evidence of payment of prescribed licensing fees to NDPC

NDPC License Registration Categories

The registration is categories into 3 with each having its own registration fee.

This fee is also different from the annual Compliance Audit Return (CAR) filing fee that UHL and EHL organizations pay when they file their annual audit.

The figures below are the GAID 2025 registration fees.

1. Ultra High Level (UHL)

Annual registration fee is ₦250,000

This category covers organizations where data processing is massive in scale and sensitive in nature: commercial banks, telcos, insurers, multinationals, electricity distribution and oil & gas companies, payment gateways, and fintechs

2. Extra High Level (EHL)

Annual registration fee is ₦100,000

EHL covers government Ministries, Departments and Agencies including microfinance and mortgage banks, higher institutions, and tertiary/secondary hospitals or organizations processing 1,000–5,000 data subjects in a six-month period.

3. Ordinary High Level (OHL)

Annual registration fee is ₦10,000

This is an entry level primary/secondary schools, training providers, primary health centers, and other organizations over the 200-data-subject threshold (200–999 data subjects in six months) that do not fall into UHL or EHL.

Guide To Register For NDPC License in Nigeria

• Visit the NDPC registration website and create an account
• Complete the NDPC application form
• Submit supporting documents
• Pay applicable fees
• Await application review
• Respond to any compliance queries

How Long Does NDPC Registration Take?

The average time for NDPC registration and licensing takes about 7 to 10 days if you meet all regulatory requirements.

Common Reasons NDPC Applications Are Rejected

• Incomplete documentation
• Wrong information
• Lack of qualified personnel
• Poor compliance policies
• Inactive company status with CAC
• Invalid company records
• Failure to meet eligibility requirements

NDPC License Fee in Nigeria

If you are planning to apply for Nigerian Data Protection License from NDPC, you should consider applying in the category (among the 3) that fits your business.

The category you decide to choose will depend on the license fee

• Ultra High Level (UHL) ₦250,000
• Extra High Level (EHL) ₦100,000
• Ordinary High Level (OHL) ₦10,000

Please note that these fees does not include professional fee

Tips for a Successful NDPC Registration

• Provide all relevant and complete documents
• File CAC annual returns to date
• Prepare compliance policies
• Hire only experienced consultant
• Ensure consistency in submitted information