Click to Join IIM Community of Professionals | MY IIM

iim
Institute of Information Management (IIM)

IIM CDPO® RE-CERTIFICATION

RE-CERTIFICATION – IIM CDPO® 

Application Process & Standard Operating Procedure (SOP)

1. Purpose of Re-Certification

The Institute of Information Management (IIM) CDPO Re-Certification process ensures that Certified Data Protection Officers: 

  • Maintain current competence in data protection, privacy, and information governance
  • Engage in continuous professional development (CPD)
  • Uphold ethical, legal, and professional standards
  • Remain aligned with evolving regulatory frameworks, including the Nigeria Data Protection Act (NDPA) 2023

2. Re-Certification Cycle

  • Validity Period: 12 months from date of issuance
  • Re-Certification Frequency: Annual
  • Grace Period: Read more on IIM re-certification policy and compliance status

3. Eligibility for Re-Certification

A candidate is eligible to apply for re-certification if they:

  • Hold a valid or recently expired IIM CDPO certificate
  • Have completed the minimum CPD requirement (20 CPD points) within the certification year
  • Have not been subject to disciplinary sanctions affecting certification status

 4. Re-Certification Application Timeline

The re-certification application window opens 60 days before certificate expiry. Candidates are strongly advised to submit their applications at least 30 days before the expiry date to allow sufficient time for review and processing. Applications must be submitted on or before the certificate expiry date. Applications received after expiry will be treated as late submissions and will be subject to applicable reinstatement conditions.

5. Step-by-Step Re-Certification Application Process

Step 1: Prepare Required Documentation

Applicants must compile the following:

  • Completed Re-Certification Application Form
  • CPD Evidence Portfolio, including, CPD Log / Record, certificates of attendance or completion, evidence of publications, speaking engagements etc
  • Valid Identification (required for verification)
  • Declaration of Professional Conduct & Compliance
  • Proof of Payment of applicable maintenance fee

Step 2: Submit Re-Certification Application

Applications shall be submitted via:  

Email: certification@iim-africa.org

Subject line format:

IIM CDPO Re-Certification Application – [Full Name] – [Certificate Number]

Step 3: Acknowledgement of Application

  • IIM will issue an acknowledgement email within 5 working days
  • Applicants may be contacted for clarification or additional documentation

Step 4: CPD Review & Verification

The IIM Certification Unit shall:

  • Review CPD activities for relevance, authenticity, and completeness
  • Validate CPD points claimed against IIM CPD Framework
  • Conduct spot audits where necessary

Possible Outcomes:

  • CPD Fully Met → Proceed to approval
  • CPD Shortfall Identified → Applicant notified to complete outstanding CPD
  • CPD Non-Compliant → Application deferred or declined

Step 5: Payment of Certification Maintenance Fee

Upon satisfactory CPD verification, applicants must pay the applicable fee:

  • IIM Accredited Members: ₦80,000
  • Non-IIM Members: ₦100,000

Payment confirmation must be submitted before final approval.

Step 6: Re-Certification Approval & Issuance

Once all requirements are met:

  • Re-Certification is approved by the IIM Certification Authority
  • IIM CDPO certificate validity date updated with same certificate number 
  • Certificate holder status is updated in the IIM Register of Certified Professionals

6. Late Renewal & Reinstatement

Late Renewal & Reinstatement Policy
If a CDPO certification expires before re-certification is completed, the candidate’s status becomes inactive and use of the CDPO designation must cease. Reinstatement requirements depend on the length and nature of the lapse:
  • Short Lapse (up to 3 months):
Completion of outstanding CPD requirements and payment of a reinstatement fee.
  • Extended Lapse (over 3 months):
Additional CPD, refresher training, assessment, or other conditions may be required to demonstrate continued competence.
  • Severe Non-Compliance:
Significant lapses or breaches may result in a requirement for re-examination or full re-application.
All reinstatement decisions are made in accordance with IIM certification policies and internationally recognised certification standards.

IIM reserves the right to determine reinstatement conditions on a case-by-case basis.

7. Professional Conduct Declaration

All applicants must formally declare that they:

  • Continue to adhere to IIM’s Code of Ethics
  • Have complied with applicable data protection laws
  • Have not misrepresented certification status
  • Will uphold professional integrity throughout the certification period

False declarations may result in suspension or withdrawal of certification.

8. Roles & Responsibilities

Candidate/Applicant

  • Maintain CPD records
  • Submit accurate and verifiable documentation
  • Meet renewal timelines and financial obligations

IIM Certification Unit

  • Verify CPD and documentation
  • Maintain certification records
  • Issue renewal decisions and certificates

9. Appeals & Complaints

Applicants may submit appeals relating to:

  • CPD assessment decisions
  • Re-Certification outcomes

Appeals must be submitted in writing to: certification@iim-africa.org (within 14 days of notification).

10. Official Communication

All re-certification correspondence shall be conducted through:

  • Institute of Information Management (IIM)
  • Email: certification@iim-africa.org.
  • Website: www.iim-africa.org.
  • Phone: +234 808 377 3640

11. Policy Authority

This re-certification process is issued under the authority of the Institute of Information Management (IIM) and is subject to periodic review to reflect regulatory, professional, and institutional developments.

...from Information to Value