This obligation is reserved for businesses designated as Data Controller of Major Importance (DCMI) in Nigeria. The rule of thumb for this designation is that within a period of 6 months, the organisation processes personal information of more than 200 persons. Where this applies to your business, it is mandatory to register with the Commission as a DCMI.