EXPRESSION OF INTEREST/REQUEST FOR PROPOSAL PROCUREMENT OF THIRD-PARTY SERVICE PROVIDER TO CONDUCT DATA PROTECTION COMPLIANCE AUDIT.
- CrediCorp
- Apr 15
- 3 min read
INTRODUCTION
The Nigerian Consumer Credit Corporation (CREDICORP) hereby invites
qualified and experienced firms to submit Expressions of Interest (EOI) for
the engagement of a third-party service provider to conduct a Data
Protection Compliance Audit.
SCOPE OF SERVICE
The selected Firm will be responsible for the following services:
Governance & Privacy Management
Data Mapping & Inventory
Legal & Regulatory Compliance
Technical Security Assessment
Third-Party & Vendor Assessment
Data Subject Rights Assessment
Breach Management & Incident Response
Physical & Administrative Security
Consumer Credit Data Protection Risk Assessment
3. ELIGIBILITY CRITERIA
Interested firms shall submit the following minimum verifiable requirements to
be eligible for engagement consideration:
Evidence of Certificate of Incorporation with the Corporate Affairs
Commission (CAC) including Form CAC 2 and CAC 7.
Evidence of Company Income Tax Clearance Certificate for the last three
(3) years. (2023, 2024 & 2025) valid till 31st December, 2026.
Evidence of Current Pension Compliance Certificate valid till 31st
December, 2026.
Evidence of Current Industrial Training Fund (ITF) Compliance Certificate
valid till 31st December, 2026.• Evidence of Current Nigerian Social Insurance Trust Fund (NSITF) compliance Certificate valid till 31st December, 2026;
Evidence of Registration with the National Database of Federal
Contractors, Consultants and Service providers by submission of Interim
Registration Report (IRR) or valid Certificate issued by Bureau of Public Procurement.
Evidence of Professional Qualifications and License
Sworn affidavit disclosing that the Bidder is neither in receivership nor a
subject of insolvency/bankruptcy/winding up proceedings.
Company Audited Statement of Accounts for the last three (3) years
(2023, 2024 & 2025)
Company’s Profile, including current evidence of registration of both the
company and key personnel with relevant professional bodies.
Verifiable documentary evidence of at last three (3) similar jobs executed
in the last five (5) years including engagement letters.
Consent to allow for Verification of all the documents submitted including
CAC, Federal Inland Revenue, Pension & Industrial Training Fund and
Company’s financial standing with bankers.
For Joint Venture/Partnership, Memorandum of Understanding (MoU)
should be provided (CAC, Tax Clearance Certificate, Pension
Compliance Certificate, ITF Compliance Certificate, NSITF Compliance
Certificate, IRR & Sworn Affidavits are compulsory for each JV partner).
All documents for submission must be transmitted with
Covering/Forwarding letter under the Company/Firm’s Letter Head Paper
bearing amongst others, the Registration Number (RC) as issued by the
Corporate Affairs Commission (CAC), Contact Address,
Telephone Number (preferably GSM No), and e-mail address. The Letterhead
Paper must bear the Names and Nationalities of the Directors of the Company
at the bottom of the page duly signed by the authorized officer of the firm.
SUBMISSION OF EOI DOCUMENTS /RFP The Submission of EOI/Request for Proposal can be submitted via CREDICORP EOI Portal or via e-mail in a PDF file format.
Fee Quote Vendor shall also submit composite fee quote for the assignments
mentioned.
OPENING OF EOI DOCUMENTS
The EOI documents shall be opened immediately after the deadline on
20th May, 2026 by 12 noon at the CREDICORP Head Officer, Centurium Place,
CBD, Abuja, FCT, in the presence of vendors, vendors’ representatives and
interested members of the public.
Members of the public and intended vendors are all invited to witness the EOI
opening by 12 Noon on 20th May, 2026 at CREDICORP Head Office, Centurium
Place, Central Business District, Abuja.
7. GENERAL INFORMATION
Request for Proposals must be in English Language and signed by an official
authorised by the bidder.
Request for Proposals shall not be accepted after the deadline.
The CREDICORP is neither committed nor obliged to shortlist any firm.
The CREDICORP will only recognize and correspond with only authorised
officers of the applicant’s companies and NOT through individuals or
agents acting on their behalf.
This advertisement for invitation shall neither be construed as a
commitment on the part of the CREDICORP nor shall it entitle any contract
to make any claims whatsoever and /or seek any indemnity from the
CREDICORP.
Submission with false document is an offence, which will lead to
disqualification and prosecution.
The applicants shall bear all costs associated with the preparation and
submission
The Applicant is expected to examine all instructions, forms, terms, and
specifications in this RFP. Application shall be deemed to have been done
after careful study and examination of this RFP with full understanding of its
implications.
The information contained in this Request for Proposal (RFP) document or
information provided subsequently to applicants, is provided to the applicant(s) on the terms and conditions set out in this RFP document and
all other terms and conditions subject to which such information is provided.
CREDICORP is not bound to pre-qualify/shortlist any firm and reserves the
right to annul the Procurement Process at any time without incurring any
liabilities in accordance with Section 28 of the Public Procurement Act
2007.
Signed
Management
The Nigerian consumer credit Corporation.
.jpg)
It’s encouraging to see CREDICORP placing strong emphasis on data protection, governance, regulatory compliance, and risk assessment, especially given the increasing importance of cybersecurity and consumer data privacy in financial services. Building trust through secure systems is essential today, whether in banking platforms or large-scale digital ecosystems such as free top games and online services.