- with Senior Company Executives, HR and Finance and Tax Executives
- with readers working within the Pharmaceuticals & BioTech, Securities & Investment and Law Firm industries
The Nigeria Data Protection Commission (NDPC) has announced an extension of the deadline for filing 2025 Data Protection Compliance Audit Returns. The new deadline is 30 May 2026, giving organisations additional time to complete their audits and ensure alignment with the requirements of the Nigeria Data Protection Act (NDPA) 2023 and the General Application and Implementation Directive (GAID).
If your organisation has not yet filed its audit returns, or has not even begun the process, this extension is not a signal to relax. It is a window of opportunity that will close faster than most compliance teams expect.
The 2025 Data Protection Compliance Audit Return is a mandatory filing requirement under the Nigeria Data Protection Act 2023. It applies to organisations classified as Data Controllers or Data Processors of Major Importance, entities that process large volumes of personal data or handle data of a particularly sensitive nature.
The audit return is not merely an administrative exercise. It is a structured assessment of how your organisation collects, processes, stores, and protects personal data. It demonstrates to the NDPC, and to the individuals whose data you hold, that your organisation is operating responsibly and within the law.
The original filing deadline has now been extended to 30 May 2026
How to Use the Extended Timeline Effectively
The additional time the NDPC has provided is most valuable when used strategically. Here is a practical framework for organisations working toward the May 30 deadline:
- Week 1–2: Assess Your Current Position
- Week 2–3: Identify and Address the Gaps
- Week 3–5: Prepare and File Your Audit Return
OAL is a licensed data protection compliance firm with deep expertise in the NDPA 2023 and the GAID framework.
We work with organisations across sectors, from higher education institutions to financial services firms, healthcare providers, and corporate entities, to navigate the full compliance lifecycle.
We help you build a compliance culture that protects your organisation, your data subjects, and your reputation, long after the deadline has passed.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
[View Source]