Coming Soon: File Your Annual Compliance Audit Return (CAR) with Confidence
Under the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive (GAID) 2025, applicable Data Controllers and Data Processors of Major Importance are required to file an annual Compliance Audit Return (CAR) with the Nigeria Data Protection Commission (NDPC).
CAR filings are facilitated through a licensed Data Protection Compliance Organisation (DPCO), which conducts the relevant compliance assessment and provides the required verification as part of the filing process.
Amstel Consulting has applied for a DPCO licence to allow it support organisations throughout the CAR process—from compliance assessment and identification of gaps to remediation support, preparation, verification and submission of the applicable return.
Compliance & NaDPAP Whitelist Benefits
Maintaining an up-to-date CAR filing record helps an organisation demonstrate accountability and provides evidence of its data protection practices to regulators, clients, business partners and other stakeholders.
CAR filing is also one of the compliance metrics considered for inclusion on the National Data Protection Adequacy Programme (NaDPAP) Whitelist. The Whitelist is intended to identify organisations that have demonstrated commitment to appropriate data protection measures and may serve as a reference point for organisations conducting relevant transactions, due diligence and other proceedings.
Inclusion is subject to the NDPC’s applicable compliance criteria and is not guaranteed by CAR filing alone.
The Risk of Missing the Filing Deadline
Failure to meet an applicable CAR filing requirement may expose an organisation to regulatory scrutiny and potential enforcement action under Nigeria’s data protection framework. Non-compliance may also affect an organisation’s ability to demonstrate effective data protection governance during regulatory reviews, client due diligence, procurement processes and vendor compliance assessments.
Maintaining an accurate and up-to-date compliance record helps demonstrate accountability and supports confidence among regulators, clients and business partners.
Ensure your organisation is ready for the annual Compliance Audit Return filing deadline. After we've obtained our DPCO licence, the experienced data privacy consultants from our team will be able to review your requirements and outline a clear, professionally managed CAR filing process for your organisation.