This module introduces the purpose and scope of Compliance Audit Returns (CAR) within Nigeria’s data protection framework. Drawing on the NDP Act 2023 and GAID 2025, it explains how the compliance audit, the return and the filing process connect to demonstrate organisational accountability.

Participants explore which organisations are required to file, the relevance of UHL, EHL and OHL classifications, applicable timelines, filing fees and late-filing consequences. The module also explains the respective roles of management, the Data Protection Officer (DPO), the licensed Data Protection Compliance Organisation (DPCO) and the Nigeria Data Protection Commission (NDPC).

Through practical examples and knowledge checks, participants learn to identify their organisation’s filing obligations and plan the next steps towards CAR preparation.

Who should attend: DPOs, compliance officers, managers and staff involved in data protection audit coordination and regulatory reporting.

Understanding Compliance Audit Returns

Test of Understanding: Understanding Compliance Audit Returns

This practical module equips participants with the skills to identify, organise and maintain the evidence needed to support Compliance Audit Returns (CAR). Participants will explore key compliance documents, including privacy policies, processing records, training logs, breach registers, vendor contracts and cross-border transfer records.

Through a guided evidence-mapping exercise, learners will create an evidence index, assign document owners, classify evidence as Ready, Partial or Missing, and prioritise gaps for corrective action.

By the end of the module, participants will be able to assemble a structured evidence pack that supports accurate CAR responses and demonstrates organisational accountability.

Gathering Your Evidence

Test of Understanding – Gathering Your Evidence

Gathering your evidence

This practical module guides participants through completing and preparing Compliance Audit Returns (CAR) for submission. It explores the five parts of the return: governance, technology, accountability, cross-border transfers and data processors.

Participants will learn to develop accurate responses supported by dated evidence, identify common compliance gaps and prioritise corrective actions. Worked examples and a filing checklist explain how to coordinate evidence review with a licensed Data Protection Compliance Organisation (DPCO), obtain management sign-off and retain submission records.

By the end of the module, learners will be able to prepare a structured, evidence-backed return, disclose gaps honestly and organise the steps required for timely filing and follow-up.

Completing and Filing Compliance Audit Returns

Test of Understanding – Completing and Filing Compliance Audit Returns

This practical workshop equips participants to prepare for the Compliance Audit Return (CAR) process using the NDP Act 2023 and GAID 2025. It covers who files, applicable categories, filing timelines, costs and the roles of the organisation, DPO, licensed DPCO and NDPC.Participants learn to gather and organise supporting evidence, including policies, training logs, risk assessments, breach records, processor agreements and cross-border transfer documentation. A guided walkthrough of the CAR template demonstrates how to provide accurate answers supported by dated records and evidence of actual practice.Through hands-on activities and knowledge checks, participants identify compliance gaps, prioritise corrective actions and prepare for audit, management sign-off and filing.Practical outputs: An evidence index, a prioritised gap remediation plan and a filing checklist.Who should attend: DPOs, compliance officers, internal auditors and staff responsible for coordinating data protection audits and CAR preparation.

This practical workshop equips participants to prepare for the Compliance Audit Return (CAR) process using the NDP Act 2023 and GAID 2025. It covers who files, applicable categories, filing timelines, costs and the roles of the organisation. 

Compliance Audit Returns Workshop

Data Protection & Privacy Academy

Course Details

Course content

Includes