NDPC does not charge one flat registration fee. It sorts organisations into three tiers, and each tier pays a different amount.
The three tiers
NDPC's guidance groups data controllers and processors of major importance into Ordinary-High Level (OHL), Extra-High Level (EHL) and Ultra-High Level (UHL). The tier depends mostly on how much personal data an organisation handles, though certain sectors sit in a higher tier regardless of size.
Our explainer on who counts as major importance at all covers the threshold that gets you onto this ladder in the first place.
What each tier pays
The registration fee rises with the tier. OHL pays ₦10,000. EHL pays ₦100,000. UHL pays ₦250,000.
Taken together, ₦10,000 to ₦250,000, by tier across the three tiers. Where your organisation lands inside that range depends on the tier, not on negotiation.
Why OHL works differently after registration
The fee is only half the difference between tiers. UHL and EHL organisations register once, then file a yearly compliance audit return rather than paying to register again.
OHL organisations skip the compliance audit return entirely. Instead, Every year, through the same registration process rather than a separate audit filing.
That trade-off is worth knowing before you assume every tier follows the same yearly pattern. A cheaper fee at OHL comes with a lighter, but still recurring, duty attached.
Working out which tier applies to you
Scale is the main test: how many people's personal data you process within six months. A handful of sectors count at a higher tier regardless of scale, which is why two businesses of similar size can land in different tiers.
If you are not sure which band you sit in, checking the guidance on services.ndpc.gov.ng directly beats guessing from a size estimate alone. A quick count of how many customer records you hold, and for how long, is usually enough to place yourself roughly before you confirm the detail.
Common mistakes
- Assuming every business pays the same fee. The fee depends entirely on tier, and the tiers are not interchangeable.
- Forgetting OHL's different cycle. An OHL organisation that files a compliance audit return by mistake is following the wrong process for its tier.
- Registering under the wrong tier to save money. NDPC's own assessment of your data volumes, not your self-selected tier, is what ultimately governs your obligations.
- Treating the fee as the only cost. UHL and EHL organisations also budget for the yearly compliance audit return fee on top of registration.
Where to go next
Once you know your tier, see how to register with NDPC for the actual steps, and the compliance audit return deadline and fee if your tier files one. The SME regulators hub covers the rest of this series, and the government fees tool rounds up costs like these alongside other agencies.