with the NDPR and that it is an accurate reflection of the organisation’s Personal Data management practice. SIGN 6.7 LICENSE NUMBER DATE DPCO Terms of License (Art. 4.1(4) NDPR) Every licensed DPCO shall: i. ii. iii. iv. v. 6.8 abide by the provisions of the NDPR, this Framework and other related guidelines and frameworks as may be issued or directed by NITDA from time to time; deliver service in a professional and ethical manner; ensure every information it provides to NITDA about its client shall be factual and professional; not mishandle or withhold any Personal Data or asset of its client unlawfully in the course of its relationship with the client; be held liable, if found to have conspired to provide false and misleading information in an audit filing or communication. Auditor’s Code of Conduct (Art. 4.2(6) NDPR) Every DPCO shall ensure all its members of staff are aware of the ethical considerations in the performance of an audit under the NDPR. The following are basic ethical expectations required of DPCOs in the conduct of their business. a) Confidentiality - The DPCO and its Client must execute a binding non-disclosure agreement before embarking on audit process. This will ensure that the information and data of the client is kept confidential. b) Conflict of Interest - DPCOs shall not audit a client if it amounts to a conflict of interest. Any DPCO that provides any other legal, audit or compliance function to the same client shall attach a Conflict of Interest Declaration to the audit report. Financial Auditors shall not provide Data Audit to the same client. 16 | P a g e