OHL is the lightest of NDPC's three registration tiers, and it works on a different clock from the other two.
Why OHL skips the compliance audit return
Ultra-High and Extra-High Level organisations register once, then file a yearly compliance audit return, or CAR. Our guide to that return covers its deadline and fee.
Ordinary-High Level organisations don't follow that path. GAID 2025 exempts them from the CAR entirely, in favour of a simpler yearly step.
What OHL organisations do instead
Every year is the rule for OHL. Rather than a separate audit filing, the organisation renews its registration itself, at the same ₦10,000 fee each time.
This keeps the ongoing duty lighter for OHL organisations, which NDPC's tiering already treats as lower risk than EHL or UHL. A small hotel, a primary school or a corporate training provider sitting at this tier deals with one yearly task, not two.
That still means putting the renewal date somewhere you'll actually see it. A yearly duty that only needs doing once is easy to forget precisely because it doesn't come round often.
How the fee compares across tiers
OHL pays ₦10,000, against ₦100,000 for EHL and ₦250,000 for UHL. Our fuller breakdown of the three tiers covers what decides which one you fall into.
The lower fee is only half the picture. The renewal-instead-of-audit-return structure is the bigger practical difference day to day.
What moves a business out of OHL
Growth is the main trigger. If the personal data you process within six months rises past OHL's range, or your business moves into a sector NDPC treats as higher-risk by default, you move up a tier.
Our guide on who counts as major importance is worth rereading if your customer base has grown since you first registered. A tier change brings the CAR and DPCO requirements into play for the first time, along with a higher registration fee than OHL's own.
None of this happens automatically on NDPC's side. A business that keeps renewing at OHL year after year, without checking whether it has actually outgrown that tier, is the one most likely to be under-registered without realising it.
Common mistakes
- Assuming OHL means no ongoing duty at all. The yearly renewal is still a real deadline, even without an audit return attached.
- Missing a tier change. Growth in your data volumes can move you into EHL or UHL without an automatic notice from NDPC.
- Confusing renewal with the compliance audit return. They serve different tiers and work differently.
- Forgetting to update NDPC when your details change. Report a change within 60 days, tier moves included.
For the registration process itself, see how to register with NDPC, and the SME regulators hub for the rest of this series.