Conduct annual Data Protection Audit per NDPR Section 2.8 by NITDA-licensed DPCO and submit annual returns to NITDA (now NDPC) including processing inventory + compliance attestation + DPO report. Acknowledge enforcement and penalties: for controllers processing personal data of more than 10000 data subjects up to NGN 10 million or 2 percent of annual gross revenue (lower of) + for processing personal data of less than 10000 data subjects up to NGN 2 million or 1 percent of annual gross revenue (lower of). Maintain transition plan to NDPA 2023 including DCMI registration + ongoing NDPC compliance + records of processing activities + staff training + direct marketing controls + storage and retention limitation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.