Navigating NDPC Audits: Essential Documentation And Strategic Responses Under The NDPA

Introduction

Data controllers and Data Processors Major Importance must prepare, maintain, and make available certain documents for audit review before filing its NDPA compliance audit return with the NDPC and when invited for an investigation by the NDPC to show its compliance with the NDPA. These essential documents include but not limited to;

1. Certificate of Registration: Data controllers and data processors of major importance are required to be registered with the NDPC, hence must obtain and possess a registration certificate as proof of such registration.¹
2. DPO Certification: The NDPC carries out Annual Credential Assessment (ACA) of DPOs in order to ensure that each DPO maintains the level of professionalism required to carry out his or her responsibilities. The certification of a DPO will be verified by the Commission as part of the Compliance Audit Return or registration.²