Compliance Audit Returns (CAR)
Periodic audit filings submitted to the NDPC via licensed bodies.
Definition
Structured audit reports required under GAID that designated controllers/processors (particularly DCPMIs) must file with the NDPC, documenting compliance status, RoPA integration, identified gaps, and corrective action plans. GAID prescribes CAR templates, filing cycles, and the submission pathway through licensed DPCOs to enable regulatory monitoring and comparability.
Related Terms
Data Protection Compliance Organisation (DPCO)
Licensed organisations authorised to perform compliance audits and filings....
Compliance Audit Returns
Periodic audit filings required of DCPMIs under the GAID....
Data Controllers and Processors of Major Importance (DCPMI)
Entities meeting thresholds requiring enhanced registration and oversight....
General Application and Implementation Directive (GAID) 2025
NDPC's implementing directive operationalising the NDPA....
Data Controller/Processor of Major Importance (DCPMI)
A regulated classification triggering registration and enhanced obligations....