The Nigerian Government has directed all Ministries, Departments and Agencies (MDAs) to fully implement the provisions of the Nigeria Data Protection Act (NDP Act), 2023, in a bid to strengthen responsible data governance, protect the personal information of citizens and boost public trust in government institutions.
The directive is contained in a Circular dated July 27, 2026 and signed by the Secretary to the Government of the Federation (SGF), Senator George Akume with reference No. Circular No. 59805/S.I/74.
Senator Akume said the circular drew the attention of all Federal Government MDAs to the directive of President Bola Ahmed Tinubu on the strategic importance of data in national development and the need to ensure its lawful processing and protection.
The SGF said President Bola Ahmed Tinubu described data as “the new oil” and added that data’s value was enhanced when refined and responsibly shared.
“The President directed all ministries, extra-ministerial departments and agencies to collect information diligently and protect the information in line with the Nigeria Data Protection Act, 2023,” he said.
The circular directed all MDAs to ensure full compliance with the Act, relevant regulations, guidelines and directives issued by the Nigeria Data Protection Commission (NDPC in respect of the collection, storage, processing and management of personal data.
To this end, the Federal Government directed all MDAs to appoint Data Protection Officers (DPOs) who are suitably qualified to oversee institutional compliance with data protection obligations and give guidance on lawful data processing.
Read Also: Lagos Ports Receive 39 Cargo Ships Carrying Petrol, Food Items, Others This Week
The circular also directs MDAs to submit the names and contacts of their designated DPOs to the NDPC for registration and official record keeping purposes.
It also said that institutions may use licensed Data Protection Compliance Organisations (DPCOs) where necessary to assist with implementation of compliance and to carry out statutory data protection audits.
Moreover, the government mandated all MDAs to allocate adequate budget for data protection activities, including staff capacity building, awareness campaigns, deployment of technological safeguards, implementation of security measures, and regular compliance audits.
The circular also mandates government institutions to submit mandatory Data Protection Compliance Audit Returns and other statutory reports to the NDPC within the stipulated timelines by law.
In an effort to ensure accountability, the Federal Government said the Permanent Secretaries, Accounting Officers and Chief Executive Officers of MDAs would be personally liable to ensure compliance with the circular and the provisions of Nigeria Data Protection Act.
In compliance with the directive, the National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission, Dr Vincent Olatunji commended the administration of President Bola Ahmed Tinubu for showing strong political and legal will to protect the privacy and fundamental freedoms of data subjects across Nigeria.
Dr Olatunji said data accountability was key to the attainment of the administration’s Eight Presidential Priorities. He said effective data governance would ensure better public service delivery, improve institutional transparency and boost citizens’ confidence in government.
He said the Commission has also set up a regulatory clinic to provide technical advice and assistance to the Ministries, Departments and Agencies in their bid to discharge their statutory responsibilities under the NDP Act.
Dr Olatunji said that the initiative is part of a broader package of regulatory measures aimed at putting Nigeria in a position to take advantage of opportunities associated with the Fourth Industrial Revolution while ensuring that personal data is processed responsibly, securely and in line with global best practices.
