FREE LEARNING PATH · DATA PROTECTION

Day 23: Registration and Fees

A complete 30-day study path through the Nigeria Data Protection Act—practical lessons, scenarios and self-checks, open to everyone.

TrustStack Academy CDPO study badge: free 30-day data protection learning pathA study-path badge, not a professional certification
30complete study days
Freeno sign-in or payment
Practicediagnostics and model answers
Self-pacedprogress saved in this browser
LESSON 23 OF 30

Registration and Fees

Read the assigned provisions, attempt the diagnostics, then compare your reasoning with the model responses.

Today’s topicRegistration and Fees
Estimated time60-90 minutes
Primary Act referencess.44-45 and s.65
Guide referenceGuide pp.5, 11-12

Learning Objectives

Explain and apply major-importance status.

Explain and apply registration timing.

Explain and apply registration information.

Explain and apply significant changes.

Explain and apply fees levies and evidence pack.

Diagnostic Assessment

Attempt these questions before reading the model responses.

1. What is the principal compliance issue addressed by ss.44-45 and s.65?

Show model response

Model response: It is registration and fees. The analysis should focus on major-importance status and the connected statutory conditions.

2. Identify two concepts that must be considered when analysing registration and fees.

Show model response

Model response: Any two of the following are relevant: major-importance status, registration timing, registration information, significant changes.

3. Why should a DPO cite the exact section instead of relying only on a general privacy principle?

Show model response

Model response: The section contains the controlling conditions, limits and exceptions. A general principle may guide analysis but cannot replace the specific statutory test.

4. What evidence should an organisation retain when applying ss.44-45 and s.65?

Show model response

Model response: It should retain the facts considered, the statutory test, the decision, supporting records, responsible approval and any review or corrective action.

5. How should the organisation respond when the uploaded sources do not resolve a material detail?

Show model response

Model response: It should record the limitation and avoid inventing a requirement. The DPO should return to the full statutory wording and seek current authoritative material when permitted.

Structured Lesson

LEGAL RULE: The controlling statutory material for this lesson is ss.44-45 and s.65. Apply its precise language, conditions and exceptions to the facts.

1. Major-Importance Status

Major-importance status is a central issue for this study day. The DPO should locate the exact statutory conditions in ss.44-45 and s.65, apply them to the particular processing activity and retain evidence supporting the conclusion.

2. Registration Timing

Registration timing is a central issue for this study day. The DPO should locate the exact statutory conditions in ss.44-45 and s.65, apply them to the particular processing activity and retain evidence supporting the conclusion.

3. Registration Information

Registration information is a central issue for this study day. The DPO should locate the exact statutory conditions in ss.44-45 and s.65, apply them to the particular processing activity and retain evidence supporting the conclusion.

4. Significant Changes

Significant changes is a central issue for this study day. The DPO should locate the exact statutory conditions in ss.44-45 and s.65, apply them to the particular processing activity and retain evidence supporting the conclusion.

5. Fees Levies And Evidence Pack

Fees levies and evidence pack is a central issue for this study day. The DPO should locate the exact statutory conditions in ss.44-45 and s.65, apply them to the particular processing activity and retain evidence supporting the conclusion.

GUIDE GUIDANCE: The Guide assigns Day 23 to registration and fees and requires study of ss.44-45 and s.65. Its practical emphasis is major-importance status, registration timing, registration information.
TUTOR EXPLANATION: Use a five-step analysis: identify the processing facts, confirm the actor and role, locate the controlling section, test every condition and exception, then document the decision and evidence.

Nigerian Scenario and Model Analysis

A Nigerian commercial bank begins a project involving staff or customer personal data. The project raises questions about major-importance status and registration timing. Identify the controller, any processor, the data subjects, likely personal data, the required statutory analysis under ss.44-45 and s.65, key risks and the compliance evidence that should be retained.

Show model response

Model analysis: The organisation determining why and how the project operates is normally the controller. A vendor acting only on documented instructions is normally a processor. Staff or customers are the data subjects. The DPO should inventory the data, apply ss.44-45 and s.65 to the stated purpose, document the decision, assign controls and retain evidence. The final conclusion depends on the precise facts and statutory conditions.

Lesson Summary

Day 23 establishes how a DPO should understand and apply registration and fees. The legal starting point is ss.44-45 and s.65. The main operational lesson is to connect major-importance status, registration timing, registration information to documented facts and evidence.

Ten Key Terms

TermWorking definition
ControllerA person or body that determines the purposes and means of processing personal data.
ProcessorA person or body that processes personal data on behalf of a controller.
Data SubjectThe identified or identifiable individual to whom personal data relate.
Personal DataInformation relating to an identified or identifiable individual.
ProcessingAn operation performed on personal data, including collection, use, storage, disclosure or deletion.
Major ImportanceThe statutory classification relevant to DPO designation, registration and penalty treatment.
DpoA Data Protection Officer who advises, monitors compliance and acts as a regulatory contact under section 32.
ControllerA person or body that determines the purposes and means of processing personal data.
ProcessorA person or body that processes personal data on behalf of a controller.
AccountabilityResponsibility for compliance and the ability to demonstrate it with evidence.

Definitions are paraphrased for study. Check section 65 and the relevant operative provision for controlling wording.

Five Revision Questions and Responses

1. What provisions govern this lesson?

Show model response

Response: ss.44-45 and s.65

2. What are the principal concepts?

Show model response

Response: major-importance status, registration timing, registration information, significant changes, fees levies and evidence pack.

3. What is the correct source hierarchy?

Show model response

Response: The Act is primary authority. The Guide supports learning and professional application. Tutor explanation assists interpretation without creating new law.

4. What is the central evidence requirement?

Show model response

Response: Record the facts, applicable test, conclusion, approval, controls and review trigger.

5. What common error should be avoided?

Show model response

Response: Do not assume a broad principle answers the issue. Test the exact conditions and exceptions in the assigned section.

Five Multiple-Choice Questions

1. Which source provides the primary statutory rule for Day 23?

A. The Guide

B. The Act

C. A workplace policy

D. A vendor contract

2. Which provision set should be consulted first?

A. Section 1 only

B. ss.44-45 and s.65

C. Section 65 only

D. No statutory provision

3. What should follow identification of the relevant section?

A. Assume compliance

B. Test conditions and exceptions

C. Ignore evidence

D. Use consent automatically

4. Which record best supports accountability?

A. An undocumented opinion

B. A reasoned decision record

C. A verbal assurance

D. A marketing brochure

5. If the sources do not resolve a detail, what should the learner do?

A. Invent a rule

B. State the limitation

C. Cite an unrelated law

D. Ignore the uncertainty

Show model response

Answer key: 1-B, 2-B, 3-B, 4-B, 5-B. Review the lesson citations before marking.

Practical Workplace Task

Prepare a one-page compliance record for a Nigerian organisation applying ss.44-45 and s.65. Include the processing purpose, actors, data subjects, personal data, statutory test, risks, decision, controls, owner, evidence and review date.

Show model response

Expected deliverable: A dated, approved record that links factual evidence to each applicable statutory condition and records any unresolved issue.

Three Flashcards

Front: Act reference for Day 23? | Back: ss.44-45 and s.65

Front: Central topic? | Back: Registration and Fees

Front: Best analysis habit? | Back: Facts → role → section → conditions → evidence.

Reread and Progress Record

Reread: ss.44-45 and s.65; Guide pp.5, 11-12.

Date completed________________Score______%
Strong areas________________Weak areas________________
Recommended revision________________ReadinessDeveloping / Competent / Ready