Overview
The Nigerian Data Protection Commission (NDPC) has extended the deadline for the registration of Data Controllers and Data Processors of Major Importance (DCPMIs) from September 30, 2024, to October 31, 2024. The extension provides additional time for organisations to comply without penalties. The NDPC also directed that DCPMIs may only engage data processors who are duly registered with the Commission as of October 15, 2024.
Registration fees vary by category. The Ultra High Level attracts N250,000, the Extra High Level attracts N100,000, and the Ordinary High Level attracts N10,000. Failure to register within the new timeline constitutes a breach of the Nigeria Data Protection Act (NDPA) and attracts a fine of up to 2% of annual gross revenue or N10 million, whichever is greater.
This alert examines the revised timeline, the new restriction on engaging unregistered processors, and the steps organisations should take to avoid penalties. It also outlines how KENNA, as a licensed Data Protection and Compliance Organisation (DPCO), can support the registration process.
