ObligationNigeria

File annual CAR using the prescribed template

Under General Application and Implementation Directive (GAID) 2025

Data ProtectionCybersecurityPrivacyAnnually
Remindash intelligence

Overview

Major-importance controllers and processors subject to annual CAR filing must file returns annually using Schedule 2 or a replacement template; Article 9(3) provides the OHL annual-renewal exception. Imported research notes (check before approving): • Duty holders (any one of): data controller; data processor • Goes to: regulator (Nigeria Data Protection Commission) • Timing in the source: "on an annual basis" • Flagged by the research: Article 10(6) says all major-importance entities file annually while Article 9(3) exempts annually-renewing OHL from annual CAR; apply the provisions together, subject to legal review.

Important

This requirement was extracted from the source document. Applicability depends on your organization's circumstances. Review the official source and obtain professional advice where appropriate.

Key information

Jurisdiction
Nigeria
Obligation type
Filing
Frequency
Annually
Policy categories
Data Protection, Cybersecurity, Privacy
Source
Article 10(6), Article 10(6), page 17
Suggested reminders
3 months before · 1 month before · 2 weeks before · 1 week before · 3 days before
Policy last reviewed
Oct 23, 2026
Requirement details

Details

Who this may apply to

Major-importance entity required to file CAR; read together with Article 9(3), Article 7(c), Article 10(14). Logic to review: Major-importance entity required to file CAR; read together with Article 9(3), Article 7(c), Article 10(14).

When this applies

Annually · on an annual basis — exact deadline not calculated

From the source

Source material
“A data controller or data processor of major importance shall file CAR on an annual basis. The CAR shall be based on the template provided in Schedule 2 to this GAID or as may be prescribed by the Commission., (7) In the case of a data controller or a data processor of major importance that was established before the 12th day of June, 2023, it”

Article 10(6), Article 10(6), page 17

Other obligations in this policy

Explore other identified requirements from the same source policy.

View all 4

Remindash provides this information to help organizations identify and track potential obligations. Applicability can depend on your organization's circumstances. Review official sources and obtain professional advice where appropriate.