Consultancy for Data Protection Audit and Filling with the Nigeria Data Protection Commission

About the Engagement

Action Against Hunger | ACF-International seeks an external auditor to conduct a comprehensive data protection audit. The auditor will evaluate the organization's compliance status with data protection regulations and prepare a formal audit report for submission to the Nigerian Data Protection Commission (NDPC).

This is an assurance engagement requiring the auditor to provide audit findings and express assurance on the organization's compliance with the Nigerian Data Protection Act (NDPA).

Geographic Scope

The audit will cover operations in Borno State, Sokoto State, and Yobe State, Nigeria.

Auditor Responsibilities

• Perform data protection audit procedures as specified in the Terms of Reference
• Evaluate and examine compliance status with the Nigerian Data Protection Act and Regulations
• Conduct systematic examination of data protection practices and policies
• Provide a detailed report of factual findings to the organization
• Express audit opinion and assurance on compliance status
• Prepare the audit report in a format acceptable for NDPC submission

Organization Responsibilities

• Provide all relevant documents, reports, and information related to data protection
• Ensure all materials align with the Nigerian Data Protection Act and Regulations
• Grant the auditor full access to staff, databases, and relevant records
• Facilitate audit procedures and provide necessary support for effective completion

Auditor Qualifications

The auditor or firm must meet at least one of the following requirements:

• Licensed by the Nigerian Data Protection Commission (NDPC)
• Possess comprehensive knowledge and full understanding of the Nigerian Data Protection Act requirements
• Demonstrate expertise in EU GDPR compliance or equivalent international data protection standards