Skip to content

Licensed DPCOs

Licensed Data Protection Compliance Organisations (DPCOs) in Nigeria

A Data Protection Compliance Organisation licensed by the Commission to audit and file on behalf of controllers.

Only a licensed DPCO can sign the audit return that goes to the Commission.

DPCO firms on Asiri, with published scopes and records

  • ACA LEGAL

    Licence current on the Commission’s register when it was last read.

  • BISLY NIGERIA LIMITED

    Licence current on the Commission’s register when it was last read.

  • Data Network Link Partners

    Lagos · Licence current on the Commission’s register when it was last read.

    Data Network Link Partners (DNLP) is a specialist consulting firm dedicated to building trust, resilience, and accountability in today’s data-driven world. We operate at the intersection of law, data protection, cybersecurity, and governance, helping organisations protect what matters most—information, reputation, and stakeholder confidence.

  • ECAM GLOBAL SERVICES NIGERIA LIMIED

    Licence current on the Commission’s register when it was last read.

  • TROS TECHNOLOGIES LIMITED

    Licence current on the Commission’s register when it was last read.

  • VICTORIA CHAMBERS

    Lagos · Licence current on the Commission’s register when it was last read.

    Victoria Chambers, established in 2002, is a leading law firm headquartered in Lagos, Nigeria, with proven expertise in providing high-quality legal services in the maritime, energy, and corporate sectors. Why Choose VICTORIA CHAMBERS? We have a reputation for providing an exceptional legal service. We are renowned for our commitment to excellence and for our ability to find innovative solutions to the most complex cases

Every DPCO on the Commission’s register, by state

The Nigeria Data Protection Commission’s published register of licensed Data Protection Compliance Organisations, entry by entry, each with the licence state it lists and the day a person last read it.

Anambra (1)

Bauchi (1)

Benue (1)

Edo (1)

Ekiti (1)

Enugu (1)

Federal Capital Territory (130)

Gombe (1)

Imo (1)

Kaduna (5)

Kano (1)

Kwara (1)

Lagos (188)

Niger (1)

Ogun (1)

Ondo (1)

Osun (1)

Oyo (5)

Plateau (3)

Rivers (4)

State not published (5)

Questions people ask first

What is the difference between a DPO and a DPCO?

A DPO is your officer — an internal role, or an outsourced individual, accountable for data protection inside your organisation. A DPCO is a firm or individual licensed by the Commission to audit and file on behalf of others.

You may need both, and one cannot substitute for the other. People are sold the wrong one regularly.

Can I file it myself?

Only if you are not a controller of major importance. Above that line the return must go through a licensed DPCO — a firm or individual officer authorised by the Commission — and self-signing is not an option however competent your team is.

When is the audit return due?

31 March, for the preceding year. The pack itself should be assembling from January, which leaves two months to fix whatever it surfaces rather than two weeks.