Independent DPO
Uthman Oniwonlu
I help public and private organisations across Nigeria meet NDPA obligations through privacy audits, DPIAs, and outsourced DPO support — then build the internal defense through DPO certification, employee privacy & security awareness, and role-based capacity building. As a Certified Trainer, I have trained over 90 Data Protection Officers and run staff trainings nationwide, working alongside platforms such as Asiri to keep records audit-ready year-round.
- Practising since
- 2022
- Practice
- 3 people
- Services
- 10 published
- Languages
- English, Yoruba, Nigerian Pidgin
- How they quote
- Per item · Quote after scope review
Published by the practice
Services and expertise
Discuss your needs and ask for a written quotation. Confirm what is included, how fees are calculated and when invoices become due before agreeing.
- Scope published
Audit preparation support
A proactive exercises that helps an organization identify and fix compliance gaps before a formal review by an independent licensed DPCO occurs. The goal is to ensure all data protection practices, documentation, and technical controls meet statutory requirements (the NDPA).
Quote after scope reviewFor Organisations preparing for an independent audit- Evidence inventory
- Audit preparation pack
- Handover to a licensed DPCO
- Privacy advice
- Training Record Verification
- high-impact awareness sessions
- Filing a return
- Independent audit
- Scope on request
Named DPO retainer
A data protection officer for your organisation on an ongoing arrangement, without a full-time hire.
- Scope on request
Staff training
Ask what this covers and how they would approach your work.
- Scope on request
Impact assessments
Assessing the risk of new products, systems or processing before they go live.
- Scope on request
Security review
Ask what this covers and how they would approach your work.
- Scope on request
Policies & documentation
Ask what this covers and how they would approach your work.
- Scope on request
Subject requests
Ask what this covers and how they would approach your work.
- Scope published
Data Protection and Privacy Awareness Training
Data Protection and Privacy Awareness Training is a foundational program designed to educate all employees—regardless of their role on the secure handling of personal information, non-personal information and the identification of everyday security threats. Because a single innocent mistake by an entry-level worker can compromise an entire organization, this training is crucial for turning the everyday workforce into a proactive "human firewall"
Quote after scope reviewFor Employees regardless of seniority or role- Training session
- Learning materials
- Questions and answers
- Interactive scenarios
- Certification
- Policy implementation
- Scope published
Outsourced Data Protection Officer (DPO-as-Service)-NDPA 2023 Compliance
if your organization processes personal data at scale, hires out data handling to vendors, or transfers data across borders, the NDPA already requires a person with expert knowledge of data protection sitting in your governance structure. Hiring a senior in-house DPO costs far more than this engagement produces as risk reduction; not hiring one and being right is the only cheaper option, and you will not always be right. This service gives you that designated DPO function at a fraction of the salary cost and with the NDPC filing track record already in place.
Quote after scope reviewFor Organizations that recognize data privacy as a critical business assets, rather than just a regulatory hurdle.- Privacy advice
- Register reviews
- Team check-ins
- NDPC registration and renewal
- Audit preparation pack
- Independent point of contact with the NDPC
- Data-subject request handling
- Breach response readiness
- Cross-border transfer assessment
- Vendor or data processor due diligence
- privacy-by-design review
- Lawful basis & processing activity review
- Staff Training Coordination
- Independent audit
- Filing a return
- Legal representation
- Issuing statutory audit opinions
- Acting as in-house Information Security lead
- Scope published
Privacy training
Practical privacy training tailored to your team and its responsibilities.
About 2 daysPer training sessionFor Teams handling personal data- Training session
- Learning materials
- Questions and answers
- Knowledge check session
- Privacy advice
- Register reviews
- Certification
- Policy implementation
- Filing a return
- Independent audit
Not among what they publish
Clear payment terms
Know what you are paying for
Review the quotation
Compare the scope, deliverables, exclusions, professional fee and any stated taxes.
Agree the invoice schedule
Both parties sign the agreement. Each invoice follows its agreed date or delivery trigger.
Pay an issued invoice
Review the amount before checkout. A verified payment is recorded with a receipt; provider bank settlement is tracked separately.
Keep the record together
Messages, delivered work and payment records stay connected to the engagement. Statutory filing fees are identified separately where applicable.
The statutory NDPC fee is separate and is paid by you to the Commission, not to them and not through us. It never passes through Asiri, so there is nothing for us to hold, release, or take a cut of.
THE PERSON BEHIND THE EXPERTISE
Meet Uthman
An individual data protection officer can support your organisation’s privacy work. Independent audit opinions and annual filings require a licensed DPCO.
- Sectors
Before you appoint
Understand the scope before you appoint
- Annual filing and independent audit opinions are provided through a licensed DPCO on Asiri. Discuss these separately from DPO support.
- Agree the officer’s responsibilities, availability and any potential conflicts before appointment.
The next step is a conversation
A good working relationship starts here.
Discuss your needs, availability and fees with Uthman Oniwonlu before agreeing to work.