How to Register with Nigeria Data Protection Commission (NDPC) 2026: Step-by-Step Guide for PoS Agents and Businesses

Thousands of Point of Sale (PoS) operators and businesses that collect customers’ personal information are now expected to comply with a key requirement under Nigeria’s data protection law.

The Nigeria Data Protection Commission (NDPC) has directed organizations classified as Data Controllers and Data Processors of Major Importance (DCPMIs) to register with the Commission after a Federal High Court affirmed its regulatory powers under the Nigeria Data Protection Act (NDPA) 2023.

For many PoS agents, the announcement has raised several questions. Who needs to register? How do you complete the registration? What documents are required? How much does it cost?

This guide explains everything you need to know, including the official registration website, eligibility requirements, registration fees and the complete application process.

Why PoS Agents Must Register with the NDPC

PoS businesses handle sensitive customer information every day.

Whenever a customer makes a withdrawal, transfer or payment, the business processes information such as:

• Customer names
• Bank account details
• Phone numbers
• Bank Verification Numbers (where applicable)
• Transaction records
• Other personal information

Because these businesses process personal data, the NDPC says they fall within organisations that must comply with the Nigeria Data Protection Act.

A recent Federal High Court judgment also confirmed that the Commission has the legal authority to regulate such businesses.

What Is the Nigeria Data Protection Commission (NDPC)?

The Nigeria Data Protection Commission is the Federal Government agency responsible for enforcing the Nigeria Data Protection Act (NDPA) 2023.

Its responsibilities include:

• Protecting Nigerians’ personal information.
• Monitoring organisations that process personal data.
• Ensuring businesses comply with data protection laws.
• Investigating complaints.
• Imposing sanctions where necessary.

The Commission also maintains a register of organisations required to comply with the law.

Who Needs to Register?

Registration is not limited to PoS agents alone.

Businesses that process significant volumes of personal data may also be required to register.

Examples include:

• PoS operators
• Fintech companies
• Banks
• Microfinance institutions
• Insurance companies
• Hospitals
• Schools and universities
• E-commerce businesses
• Telecommunication companies
• Digital lending platforms
• Logistics companies
• Payroll service providers
• Large employers
• Government agencies processing personal data

If your business regularly collects, stores or processes customer information, you should determine whether your organisation falls within the NDPC registration framework.

What Is a Data Controller or Data Processor?

A Data Controller decides why and how personal data is collected and used.

A Data Processor processes personal data on behalf of another organisation.

Many businesses perform both roles.

For example, a PoS business collects customer information during transactions and processes that information electronically.

Registration Categories Under the NDPC

The Commission classifies organisations into different categories depending on the volume and sensitivity of personal data they process.

The categories include:

Ordinary High Level

Suitable for organisations processing moderate amounts of personal information.

Registration Fee: ₦10,000

Extra High Level

Designed for organisations processing larger volumes of personal data.

Registration Fee: ₦100,000

Ultra High Level

Applies to organisations handling highly sensitive or very large volumes of personal information.

Registration Fee: ₦250,000

The appropriate category depends on the nature of your business and the amount of personal data you process.

Official NDPC Registration Website

Businesses should only use the Commission’s official portal when registering.

Official website:https://ndpc.gov.ng   or go straight to the registration section here  https://services.ndpc.gov.ng/

For DCPMI registration, applicants can also access the registration portal through the Commission’s official website.

Avoid websites or agents claiming to offer unofficial registration services.

---

How to Register with the Nigeria Data Protection Commission

If your organisation is required to register, follow these steps.

Step 1: Visit the Official NDPC Website

Open your browser and visit the official Nigeria Data Protection Commission website.

Navigate to the section for DCPMI registration or compliance services.

---

Step 2: Create an Account

Provide your:

• Business email address
• Phone number
• Organisation details
• Password

Verify your email if requested.

---

Step 3: Complete the Registration Form

Enter the required information about your organisation.

This may include:

• Business name
• RC or Business Name number (where applicable)
• Nature of business
• Office address
• Contact details
• Type of data processed
• Number of employees
• Estimated number of data subjects

Ensure every detail is accurate before proceeding.

---

Step 4: Select the Appropriate Registration Category

Choose the category that matches your organisation.

Selecting the wrong category could delay processing or require corrections later.

---

Step 5: Upload Required Documents

Depending on your organisation, you may be asked to upload supporting documents.

These can include:

• CAC registration documents
• Valid means of identification
• Tax Identification Number (where applicable)
• Evidence of business operations
• Data protection compliance documents
• Company profile

The Commission may request additional documents where necessary.

---

Step 6: Pay the Registration Fee

After completing the application, pay the applicable registration fee.

Payment is usually made through the approved payment channels available on the portal.

Keep your payment receipt for future reference.

---

Step 7: Submit Your Application

Review every section carefully before clicking the submit button.

Incorrect information may delay processing.

---

Step 8: Wait for Review

The NDPC will assess your application.

Where additional clarification is required, the Commission may contact your organisation.

Once approved, your registration will be completed in line with the applicable regulatory requirements.

Documents You May Need

Before beginning your application, prepare:

• Business registration documents (if applicable)
• Valid means of identification
• Official business address
• Company email address
• Phone number
• Details of your data processing activities
• Payment details
• Tax Identification Number where applicable

Having these ready can make the registration process smoother.

Why Registration Matters

Registration demonstrates that your organisation recognises its responsibilities under Nigeria’s data protection law.

It also helps businesses:

• Improve customer confidence.
• Promote responsible handling of personal information.
• Strengthen internal data management practices.
• Reduce the risk of regulatory sanctions.
• Show commitment to compliance.

What Happens If You Fail to Register?

The NDPC has warned that organisations required to register but fail to comply may face enforcement measures under the Nigeria Data Protection Act.

Possible consequences may include:

• Regulatory investigations
• Administrative sanctions
• Monetary penalties where applicable
• Compliance orders
• Other legal actions permitted by law

Businesses are encouraged to comply promptly to avoid unnecessary regulatory issues.

Take Note of these Before Registering

Before submitting your application:

• Use only the official NDPC website provided in this article
• Select the correct registration category.
• Ensure all uploaded documents are clear and complete.
• Double-check your business information.
• Keep copies of every document submitted.
• Save your payment receipt.
• Monitor your email for updates from the Commission.

Frequently Asked Questions

Is NDPC registration compulsory for PoS agents?

The Federal High Court has affirmed the Commission’s authority to require eligible PoS businesses that qualify as Data Controllers and Processors of Major Importance to register under the Nigeria Data Protection Act.

What is the official NDPC website?

The official website is:

https://ndpc.gov.ng

How much is the registration fee?

Registration fees currently range from ₦10,000 to ₦250,000, depending on the category assigned to the organisation.

Can individuals register?

The registration framework primarily applies to organisations and businesses that process personal data. Eligibility depends on the nature and scale of data processing activities.

Can I register online?

Yes. Eligible organisations can complete the registration process through the official NDPC online portal.

Conclusion

The registration requirement marks another step in Nigeria’s efforts to strengthen the protection of personal data and ensure businesses handle customer information responsibly.

PoS operators and other organizations that process personal information should review their obligations under the Nigeria Data Protection Act and complete registration through the official NDPC portal where applicable. Registering early can help businesses stay compliant, avoid regulatory issues and build greater trust with customers.

Editorial Note: Zoeeb is an independent Nigerian information platform that publishes verified updates on government recruitment, grants, loans, scholarships, education, and career opportunities. Our editorial team reviews information from official government agencies and trusted public sources before publication. We do not process applications or collect fees on behalf of any organization.