Conformia

Free self-assessment

Measure your exposure in 20 questions

Twenty obligations under NDPA 2023 + GAID 2025, one per question. At the end: your score by area, what to fix first, and the plan to close the gaps. No sign-up, and no invented numbers — amounts stay out until Nigerian counsel has signed off on them.

Free self-assessment

Your exposure under NDPA 2023 + GAID 2025, in 20 questions

Twenty obligations, one per question, in plain business language. At the end: your score, your priorities and a remediation plan — no sign-up to answer.

Register & filings
Consent & information
Data-subject rights
Security & breaches
Processors & transfers
Governance & retention
Question 1/20Register & filings

Do you keep a written, up-to-date list of every file holding customer, employee or partner data (the processing register)?

No sign-up

351

Data Protection Compliance Organisations licensed by the NDPC. We do not compete with them — we equip them.

31 March

the annual deadline for the Compliance Audit Return, which UHL and EHL controllers may only file through a licensed DPCO (GAID art. 10(7), 10(14)).

72 hours

to notify the NDPC of a personal data breach, counted from becoming aware of it (NDPA s. 40(2)).

UHL · EHL · OHL

the three levels of major importance. Two of them file a return; OHL renews its registration instead (GAID art. 9(2)-(3)).

Figures from the NDPC published GAID 2025 — the transcription, its retrieval date and its hash are in docs/sources. Pending review by Nigerian counsel.

Free self-assessment — NDPA 2023 + GAID 2025