Data Controllers and Processors of Major Importance (DCPMI)
Entities meeting thresholds requiring enhanced registration and oversight.
Definition
Designated controllers or processors whose processing meets statutory volume thresholds (e.g., processing personal data of more than 200 data subjects in six months) and which are subject to enhanced obligations including mandatory registration, fee schedules, heightened reporting, and targeted oversight by the NDPC. GAID sets the criteria and administrative procedures for DCPMI designation and ongoing compliance requirements.
Related Terms
Data Controller/Processor of Major Importance (DCPMI)
A regulated classification triggering registration and enhanced obligations....
Data Protection Compliance Organisation (DPCO)
Licensed organisations authorised to perform compliance audits and filings....
General Application and Implementation Directive (GAID) 2025
NDPC's implementing directive operationalising the NDPA....
Compliance Audit Returns (CAR)
Periodic audit filings submitted to the NDPC via licensed bodies....
Personal Data Protection Officer (DPO)
Designated officer meeting SDAIA competency rules....