About GWPL Data Services

NDPA-Compliant Data Assessment, Audit & Training for Nigerian Organizations

GWPL Data Services is the dedicated data governance, data protection, and digital intelligence practice of Good Worths Partners Limited (GWPL) — a Nigerian Professional Services and Technology Firm headquartered in Abuja. The Practice operates under GWPL’s Data and Digital Growth (DDG) unit and was established to serve the growing demand for independent, expert-led data governance advisory in Nigeria’s public and private sectors.

NDPA data protection compliance audit and data readiness assessment in Nigeria
Good Worths Partners Limited – NDP Act 2023 audit: acknowledgement of statutory filing of compliance audit returns 2025 (NDPC) Click to view certificate
We Practise What We Deliver

GWPL Is NDPC Compliant under the NDP Act 2023

Good Worths Partners Limited has filed its NDP Act, 2023 compliance audit returns with the Nigeria Data Protection Commission (NDPC) for 2025. Our own compliance gives you confidence that the team auditing your data practices holds itself to the same standard.

NDPA 2023 compliant
Independent compliance professionals
Get Started

The Regulatory Imperative

The Nigeria Data Protection Act 2023

The Nigeria Data Protection Act 2023 (NDPA), enacted to replace and extend the earlier NDPR 2019, establishes enforceable obligations on every organisation that collects, stores, shares, or otherwise processes the personal data of Nigerian citizens. The NDPC — established simultaneously as the principal regulatory authority — now actively investigates, sanctions, and levies fines on non-compliant organisations.

Data readiness assessment workshop for Nigerian organisations

Service Line 1

GWPL Data Readiness Assessment (DRA)

The GWPL Data Readiness Assessment (DRA) is a structured, expert-led evaluation of an organisation's current data environment. The DRA examines how your organisation collects, stores, shares, uses, and manages personal and organisational data — and produces a quantified Data Maturity Score together with a prioritised, actionable improvement plan. The DRA is the essential starting point for any organisation that wants to understand its current data position before embarking on a compliance programme, a data governance initiative, or a technology investment. It is also the foundation for a subsequent NDPA compliance audit where required.

Service Line 2

GWPL Data Protection Compliance Audit (DPCA)

The GWPL Data Protection Compliance Audit (DPCA) is a formal, evidence-based audit of your organisation's compliance with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation 2019. Conducted by accredited compliance professionals, the DPCA produces a Compliance Gap Analysis, a Risk Register, and a Remediation Roadmap — and satisfies the annual DPCA filing requirement where GWPL acts as your Data Protection Compliance Organisation (DPCO). Unlike a self-assessment or internal review, the GWPL DPCA is conducted independently, applying objective criteria and documented evidence against the full spectrum of NDPA obligations. The result is a compliance record that is audit-ready, regulator-ready, and board-ready.

NDPA data protection compliance audit (DPCA) in Nigeria

GWPL as Your DPCO

GWPL as Your DPCO — What This Means

As a Data Protection Compliance Organisation (DPCO), GWPL Data Services can be formally designated as your organisation’s independent compliance partner, taking on responsibility for:

  • Conducting the annual DPCA audit across all eleven domains
  • Preparing and submitting the DPCA filing to the NDPC on your behalf
  • Maintaining your compliance record and providing continuous regulatory monitoring
  • Providing a designated point of contact for NDPC correspondence and enquiries
  • Advising on regulatory updates and emerging enforcement trends throughout the year

Organisations that retain a DPCO and file annual DPCA reports receive regulatory credit with the NDPC — a material advantage in any investigation or enforcement proceeding. GWPL’s DPCO engagement is available on an annual retainer basis, providing continuous protection and compliance assurance throughout the year.

Service Line 3

GWPL Data Protection Training Programme

Programme Architecture

Four tiers — Foundation, Practitioner, Specialist, Executive — each tailored to the knowledge level and role of participants

Assessment & Certification

Pre- and post-training assessments; GWPL Certificate of Completion awarded on 70%+ pass mark; CPD hours recognised by professional bodies

Training Register

Full attendance and completion records provided to client DPO/HR for regulatory evidence and NDPC filing purposes

Delivery Formats

In-person workshop, virtual (online), in-person + eLearning, self-paced eLearning module, executive boardroom briefing

Customisation

All programmes can be tailored to your sector, organisational context, and specific compliance gaps identified in your DRA or DPCA

Session Size

Workshops: 15–30 participants. Executive Briefings: up to 15. eLearning: unlimited. Custom cohort sizes available on request.

Training Tier Architecture

GWPL’s training programme is structured across four tiers to ensure that every level of your organisation receives training that is relevant, appropriate, and proportionate to their data protection responsibilities:

TIER 1

Foundation

All staff — every employee who handles personal data in any form

TIER 2

Practitioner

Team leaders, managers, HR, marketing, IT, finance, and customer-facing staff who handle data regularly

TIER 3

Specialist

Data Protection Officers (DPO), legal and compliance teams, IT security, senior operations managers

TIER 4

Executive

Board directors, C-suite executives, senior management — governance-level awareness and accountability

Sectors We Serve

GWPL Data Services provides data assessment, audit, and training services to Nigerian organisations across the following sectors. Our sector knowledge ensures that every engagement reflects the specific regulatory requirements, data processing characteristics, and risk profile of your industry:

  • Financial Services
  • Federal & State MDAs
  • Healthcare & Hospitals
  • Education
  • Telecoms & Technology
  • Professional Services
  • FMCG & Retail
  • NGOs & International Organisations

Trusted Relationships

Our Partners and Accreditations

Over the past years we have built trusted relationships and collaborated within and outside Nigeria

Contact GWPL Data Services

Know Your Data. Protect Your People. Earn Regulatory Trust.

Whether your organization is starting its data protection journey, seeking to pass an NDPC audit, or building the internal capability to manage personal data responsibly, GWPL Data Services is your trusted partner. Contact us today for a no-obligation discovery call.

We process your personal data in line with the Nigeria Data Protection Act (NDPA) 2023. Privacy Policy

Chat with us on WhatsApp Good Worths Partners Limited – NDP Act 2023 audit: acknowledgement of statutory filing of compliance audit returns 2025 (NDPC)NDPC Compliant