NDPA modules · Letters from the Commission
Answer this letter and you will get it again.
Because it is not really about the reply. Halima asked you to stop marketing to her, you did not, and the activity she objected to still has no lawful reason recorded. A letter from the Commission is a symptom with a deadline attached.
Nigeria Data Protection Commission
On behalf of the complainant
Complaint from Halima Sani — still receiving marketing
Received 14 July 2026 · owned by Ngozi Eze
Respond by 28 July 2026
3 days left
The Commission sets its own clock. It does not pause while you look for the file.
What it points at in your register
- DSR-2026-0117Halima Sani wants us to stop — an objection, 33 days elapsed and still open.
- ACT-030Marketing to lapsed customers — no lawful basis recorded, and no deletion date either.
Eri's note
She asked you to stop, you did not, and the activity she objected to still has no legal reason recorded. Fix the activity or you will answer this letter again.
Six letters this year
Ordered by what is owed, not by what arrived
Three are closed and need nothing. Two carry live deadlines. One is already past its date — and being late to the regulator about being late to a person is a different category of problem.
1 overdue
| Kind | Subject | What it points at | Owed |
|---|---|---|---|
| ComplaintNDPC-2026-0398 | Complaint from Chinedu Okafor — no answer to his access requestHe waited 36 days, then went to the Commission. Two days past their deadline as well now — this is how a late request becomes an enforcement file.Received 9 Jul 2026 · Tunde Adeyemi | DSR-2026-0114 · Chinedu Okafor wants to see his data | 2 daysoverdue |
| ComplaintNDPC-2026-0104 | Complaint from Halima Sani — still receiving marketingShe asked you to stop, you did not, and the activity she objected to still has no legal reason recorded. Fix the activity or you will answer this letter again.Received 14 Jul 2026 · Ngozi Eze | DSR-2026-0117 · ACT-030 Marketing to lapsed customers | 3 daysto respond |
| EnquiryNDPC-2026-0441 | Enquiry about monitoring of agent devicesThey ask what agents are told about the app recording them. The honest answer is nothing, and that answer is in your own register.Received 18 Jul 2026 · Tunde Adeyemi | TR-014 · Agent app analytics | 7 daysto respond |
| BreachNDPC-2026-0362 | Acknowledgement of your breach notificationAcknowledged with no further action asked for. Notified inside 72 hours, which is why this letter is short.Received 28 Jun 2026 · Ngozi Eze | INC-2026-0007 · A customer export went to the wrong merchant | Closednothing owed |
| GuidanceNDPC-2026-0311 | General Application and Implementation Directive — what changedNothing to answer, but it changed the filing rules — which is why your 2026 return now goes through a licensed DPCO.Received 2 Jun 2026 · Tunde Adeyemi | No single record — it changed the filing rules | Readno reply due |
| ReceiptNDPC-2026-0087 | Receipt for the 2025 Compliance Audit ReturnKeep this. It is the only proof the return was accepted.Received 2 Apr 2026 · Tunde Adeyemi | CAR-2025 · Compliance Audit Return for 2025 | Closednothing owed |
Five kinds, five different obligations
Two of these need no reply at all — and one of them still changed your year
The guidance letter in June asked for nothing and altered the filing rules, which is why your 2026 return now has to go through a licensed DPCO. A letter with no deadline is not a letter with no consequence.
- 14 days · hard
Complaint
Somebody went to the Commission about you. The reply must address them, not the Commission — and the underlying record has to change or it returns.
- 14 days · hard
Enquiry
They are asking a question, usually one your own register already answers. Answering fast and plainly is what keeps it an enquiry.
- Already running
Breach
An acknowledgement of something you reported. Short letters here mean you notified in time; long ones mean you did not.
- No deadline
Guidance
Nothing to answer and everything to read. The GAID letter in June is why your filing route changed for the whole year.
- No deadline
Receipt
Proof that something was accepted. Worthless until the day somebody disputes that you filed, and then it is the only thing that matters.
NDPC-2026-0398 · two days past their deadline
This is how a late request becomes an enforcement file
Nothing dramatic happened at any single step. A request sat unanswered, a person got tired of waiting, and each stage handed the problem to somebody with more authority than the last. The only thing that changed at every step was who you were dealing with.
21 June · he asks to see his data
An ordinary access request by email. Answerable in an afternoon at this point.
Eighteen days · nothing sent, nothing acknowledged
The Act fixes no number of days — it requires an answer without undue delay. Silence with nobody assigned to it is the version of delay nobody has ever argued their way out of.
9 July · the Commission writes to you
He escalated. You are no longer answering a customer, you are answering a regulator about a customer.
23 July · their deadline passes too
Two failures now, and the second is the one that establishes a pattern rather than an oversight.
Today · the original question is still unanswered
Which is the detail that will appear in any enforcement note. Thirty-six days became an open file, and he still has not seen his data.
NDPC-2026-0087 · the quietest letter you own
Keep this one. It is the only proof the return was accepted.
A receipt asks for nothing and gets filed nowhere, which is exactly why it goes missing. Two years later, when somebody asks whether you filed in 2025, the answer is this letter or an argument.
Every letter in Asiri is kept with the record it concerns, so the receipt sits beside the return it acknowledges rather than in somebody’s mailbox.
NDPC Registry
Closed · nothing owed
Receipt for the 2025 Compliance Audit Return
- Filed
- 18 Mar 2026
- Accepted
- 2 Apr 2026
- Period
- 2025
- Filed through
- Veritas Data Compliance
Every letter arrives tied to the record that caused it
So the reply can fix the cause rather than describe it. Asiri carries the deadline, names the owner, and keeps the receipt — which is the part everyone loses.