This module introduces the appointment, responsibilities and professional expectations of a Data Protection Officer (DPO), drawing on the NDP Act 2023 and GAID 2025. It explores when a DPO is required, the knowledge and credentials relevant to the role, and arrangements for internal or outsourced appointments.

Participants examine the DPO’s advisory, monitoring and regulatory liaison functions, alongside independence, reporting lines, confidentiality, organisational support and continuing professional development. The module also covers semi-annual reporting to management and recognising conflicts of interest.

Through practical examples and knowledge checks, participants learn to distinguish the DPO’s responsibilities from management’s accountability and identify conditions that support effective performance of the role.

Who should attend: Aspiring and practising DPOs, compliance officers, privacy professionals and managers responsible for appointing or supporting a DPO.

The DPO Role under the NDP Act 2023

Test of Understanding: The DPO Role under the NDP Act 2023

This practical module equips Data Protection Officers and compliance professionals to develop and maintain an organised data protection compliance programme based on the NDP Act 2023 and GAID 2025.

Participants explore six connected activities: mapping data, assessing risks, implementing controls, documenting procedures, training staff and auditing compliance. Topics include Records of Processing Activities (ROPA), Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), privacy notices, internal policies and retention schedules.

The module also examines vendor and processor oversight, data processing agreements and safeguards for cross-border data transfers. Through worked examples, practical scenarios and knowledge checks, participants learn to identify compliance gaps, assign responsibilities and maintain evidence of implementation.

Who should attend: Aspiring and practising DPOs, compliance officers, privacy professionals and staff.

Building the Compliance Programme 

Test of Understanding: Building the Compliance Programme

Working with The Regulator

Test of Understanding: Working with the Regulator

Assessment and Exam Prep 

Test of Understanding: Assessment and Exam Prep

Building the Compliance Programme

This practical course prepares aspiring and practising Data Protection Officers to strengthen their professional knowledge and approach certification assessments with confidence. Based on the NDP Act 2023 and GAID 2025, it connects regulatory concepts with the everyday responsibilities of managing an organisation’s data protection programme.The course covers four key areas: the DPO’s role, independence and reporting responsibilities; building a compliance programme; working with the Nigeria Data Protection Commission (NDPC); and assessment preparation.Participants explore data mapping, Records of Processing Activities (ROPA), Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), privacy policies, processor agreements and cross-border transfers. It also addresses NDPC registration, Compliance Audit Returns (CAR), management reporting and responding to regulatory enquiries.Through scenario workshops, knowledge checks and a mock assessment, participants practise identifying issues, applying relevant provisions and recommending clear actions using the Facts, Rule, Apply and Conclude (FRAC) method.Who should attend: Aspiring DPOs, practising DPOs, compliance officers, privacy professionals and candidates preparing for data protection certification assessments.

This practical course prepares aspiring and practising Data Protection Officers to strengthen their professional knowledge and approach certification assessments with confidence. 

Data Protection Officer Certification Prep

Data Protection & Privacy Academy

Course Details

Course content

Includes