What does the first call cost?

Nothing. It's 30 minutes with a consultant, and you leave knowing your likely tier, your next deadline and what we would do first, whether or not you work with us.

Can you file our compliance audit return?

Yes. The GAID requires returns to be filed through a licensed Data Protection Compliance Organisation, and Johan Consults is licensed by the NDPC. Returns are due by 31 March each year.

Will our teams have to stop what they are doing?

No. We plan around your calendar, work with the systems you already run, and keep workshops short and focused.

Which countries do you cover?

Nigeria and Kenya. If your organisation also serves EU customers, we cover the GDPR as part of the same programme.

How is pricing worked out?

By scope. You get the scope and the price in writing before any work starts, so there are no surprises for your finance team.

Digitalization

Redesign how work gets done, with privacy built in from day one.

Adding security after a system goes live costs more and works less well. We help you rethink processes with digital tools, designing data protection in from the start so the new way of working is faster and compliant.

Talk through your project Get a scoped quote

Starts with a free 30-minute call. No obligation.

Delivered by

An NDPC-licensed DPCO with offices in Abuja, Lagos and London, working in Nigeria and Kenya. Facts last reviewed 9 November 2026.

Do you need this?

You probably do if any of these sound familiar.

Key processes still depend on email, spreadsheets or paper sign-offs.

You're planning a new system and want it compliant from launch.

A past digital project created data risks nobody planned for.

Staff work around systems because they're slower than the old way.

The cost of leaving it

Systems built without privacy in mind usually need expensive rework once the regulator, an auditor or a partner looks closely. Fixing the design costs a fraction of fixing the live system.

Check your exposure on a free call

What do I get?

What we do with you

Process review

Where time and data are lost in your current workflows.

Solution design

Technology choices that fit your size and budget.

Implementation

Delivery alongside your teams.

Adoption support

Training so the new way of working sticks.

Where you'll end up

When we're done, you'll have:

Processes redesigned around how your teams really work

Privacy and security requirements written into the design

Staff who use the new system instead of working around it

How does it run?

How we work together

01 A first conversation We learn your business, your data and what worries you.

02 An honest assessment We show you the gaps, ranked by risk.

03 Policies that fit Procedures written for how your teams actually work.

04 Controls in place Encryption, access control and authorisation set up with IT.

05 People trained Staff know what changes for them; leads can certify.

06 Filed and supported Annual audit returns filed, ISO 27001:2022 guidance, and support as rules change.

Is this for me?

Who this is for

Public institutionsGrowing businessesOperations leadersTransformation teams

Still deciding?

Questions you might have

It depends on your size and where you're starting from. After the first call we send a scoped plan with timelines you can hold us to.

What else might you need?

Often paired with this

See all solutions

NDPA and GAID compliance Bring an NDPR-era programme up to the NDPA and the GAID. View this service Compliance audit returns Your annual return, audited early and filed by a licensed DPCO. View this service GDPR compliance Win and keep EU customers with one programme that meets both laws. View this service

Your next step

Build it right the first time.

Book a free 30-minute call. You'll leave knowing what applies to you, what is urgent, and what we would do first.