ADILOS v3Check your status →

What is a DPCO?

What a DPCO is — and whether you need one.

A DPCO (Data Protection Compliance Organisation) is an NDPC-licensed firm authorised to audit your NDPA 2023 compliance and file your Compliance Audit Return. If you process personal data at any real scale in Nigeria, a DPCO is how you get officially compliant.

Start your readiness assessment

Free · ~90 seconds · no signup required to see your score.

Licensed by the NDPC

Only NDPC-licensed DPCOs can conduct your audit and file your CAR — it's not something you can self-certify.

They run your gap audit

A DPCO assesses your processing against the NDPA, scores your gaps, and produces a Compliance Audit Report.

DPCO vs DPO

A DPO is your designated internal/consultant officer; a DPCO is the licensed firm that audits and files. You typically need both.

ADIL connects you

Run the assessment and ADIL matches you with a licensed DPCO and, if needed, a Consultant DPO — on one platform.

Not sure whether you need a DPCO, a DPO, or both? The readiness assessment tells you in 90 seconds.

Start your readiness assessment

← Back to ADIL · NDPA 2023 · GAID 2025