NDPC Compliance Assessment – 6030 Technologies

Section 1 of 7

Organisation Profile

Basic details about your organisation to help us establish context for your compliance assessment.

Organisation name * Please enter your organisation name.

Industry / Sector * Please select your industry.

Organisation type * Please select your organisation type.

Year of incorporation

Approximate number of employees * Please select employee count.

Is your organisation domiciled, resident, or operating in Nigeria? *

Yes — domiciled and operating in Nigeria Yes — operating in Nigeria but headquartered abroad Foreign entity — targeting or processing data of Nigerian residents

Please select an option.

Do you have a physical office address in Nigeria? *

Yes No

Please select an option.

Section 2 of 7

Data Processing Volume

The number of individuals whose data you process is the primary factor in determining your DCPMI classification tier.

Approximately how many individuals (data subjects) does your organisation process personal data for within a 6-month period? * Include employees, customers, patients, students, subscribers, or any other individuals whose data you hold or use.

Under 200May not qualify as DCPMI unless in a regulated sector 200 – 999Likely MDP-OHL category — registration fee ₦10,000 1,000 – 4,999Likely MDP-EHL category — registration fee ₦100,000 5,000 – 24,999MDP-UHL category — registration fee ₦250,000 25,000 – 49,999MDP-UHL — CAR filing fee ₦750,000 50,000 and aboveMDP-UHL — CAR filing fee ₦1,000,000

Please select an option.

Do you currently maintain any filing system (digital or physical) containing personal data of individuals? *

Yes No Unsure

Please select an option.

How is personal data primarily collected in your organisation? * Select all that apply.

Online forms / website Mobile application Physical / paper forms Third-party data sources Automated / system-generated Multiple channels

Please select at least one option.

Section 3 of 7

Nature of Data Processed

The sensitivity of personal data you handle significantly affects your compliance obligations and tier classification.

Does your organisation provide commercial ICT services on digital devices belonging to other individuals? * e.g. SaaS products, apps installed on customer devices, cloud storage services, communication platforms.

Yes No

Please select an option.

Does your organisation engage in cross-border transfer of personal data (sending data outside Nigeria)? *

Yes No Unsure

Please select an option.

Does your organisation use third-party servers or cloud computing services to store or process personal data? *

Yes No

Please select an option.

Does your organisation use automated or AI-driven systems for profiling or making decisions about individuals? * e.g. credit scoring, fraud detection, automated customer segmentation.

Yes No

Please select an option.

Section 4 of 7

Sector-Specific Triggers

Certain sectors are automatically classified as DCPMI regardless of data volume. Please confirm which, if any, apply to your organisation.

Section 5 of 7

Data Processing Relationships

Understanding your role as a data controller and/or processor helps determine your obligations under the NDPA.

Does your organisation process personal data on behalf of other organisations? *

No — we only process data for our own purposes (Data Controller only) Yes — we process data on behalf of other organisations (Data Processor only) Both — we control our own data and process data for others

Please select an option.

Do you engage third-party vendors, contractors, or agents who have access to personal data you hold? * e.g. IT service providers, payroll companies, CRM providers, marketing agencies.

Yes No

Please select an option.

Does your organisation share personal data with other organisations? * e.g. partners, subsidiaries, regulators, credit bureaus.

Yes No

Please select an option.

Section 6 of 7

Current Compliance Status

Your existing compliance posture helps us scope the work required and identify any penalties or urgent actions.

Has your organisation previously registered with the NDPC as a DCPMI? *

Yes — registered on time (before October 2024) Yes — registered late (after October 2024, penalty may apply) No — not yet registered Unsure

Please select an option.

Has your organisation previously filed a Compliance Audit Return (CAR) with the NDPC? *

Yes No Not applicable

Please select an option.

Does your organisation currently have a designated Data Protection Officer (DPO)? *

Yes — internal staff member Yes — outsourced / contracted No

Please select an option.

Does your organisation have a Privacy Policy published on its website or platforms? *

Yes No

Please select an option.

Has your organisation ever experienced a personal data breach? *

Yes — and it was reported to the NDPC within 72 hours Yes — but it was not reported to the NDPC No Unsure

Please select an option.

What existing data protection documentation does your organisation have? Select all that apply.

Privacy Policy Data Processing Agreements (DPAs) with vendors Record of Processing Activities (RoPA) Data subject consent forms Data retention policy Data breach response plan None of the above

Section 7 of 7

Scope & Contact Details

Tell us what you need help with and how to reach you with your proposal.

What is your primary goal for this engagement? * Select all that apply.

NDPC DCPMI registration Annual Compliance Audit Return (CAR) filing Full data protection compliance audit Gap assessment / readiness review Data Protection Officer (DPO) outsourcing Staff data protection training Privacy policy and documentation development Data Privacy Impact Assessment (DPIA) Full end-to-end compliance programme

Please select at least one option.

What is your target completion timeline? *

ASAP Within 1 month 1 – 3 months Flexible

Please select an option.

Your name * Please enter your name.

Your job title * Please enter your job title.

Email address * Please enter a valid email address.

Phone number * Please enter your phone number.

Additional context or specific concerns Any other information that would help us prepare an accurate proposal.

NDPA Compliance Intake Assessment

Organisation Profile

Data Processing Volume

Nature of Data Processed

Sector-Specific Triggers

Data Processing Relationships

Current Compliance Status

Scope & Contact Details

Assessment Complete

Your submission summary