The Federal Government has directed Ministries, Departments and Agencies (MDAs) to comply fully with Nigeria’s data protection laws as part of efforts to strengthen public trust and improve service delivery.
The directive was contained in Circular No. 59805/S.I/74, dated July 27, 2026, and signed by the Secretary to the Government of the Federation, George Akume.
According to a statement by the Nigerian Data Protection Commission (NDPC), the circular drew the attention of MDAs to President Bola Tinubu’s directive on the responsible management and protection of personal data.
“Data is the new oil: its value increases the more it is refined and responsibly shared. I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act, 2023 (NDP Act),” the President said.
The statement, signed by the Head of Legal, Enforcement and Regulations at the NDPC, Babatunde Bamigboye, said the circular directed MDAs to ensure full compliance with the Nigeria Data Protection Act, its regulations, guidelines and directives issued by the commission on the processing of personal data.
Under the directive, MDAs are required to designate suitably qualified officers as Data Protection Officers (DPOs) to oversee data protection compliance and advise management on matters relating to the lawful processing of personal data.
They are also required to communicate the names and contact details of their designated DPOs to the NDPC for registration and official records.
The circular further directed MDAs to engage licensed Data Protection Compliance Organisations (DPCOs), where required, to facilitate compliance with the NDP Act and support statutory compliance audits.
Government institutions are also expected to provide adequate budgetary allocations for data protection compliance activities, including capacity building, awareness programmes, deployment of appropriate technical safeguards and periodic compliance audits.
MDAs were further directed to submit all mandatory Data Protection Compliance Audit Returns and other statutory returns to the NDPC within the timelines prescribed by law.
The circular stated that Permanent Secretaries, Accounting Officers and Chief Executive Officers of all MDAs would be personally responsible for ensuring institutional compliance with the directive and the provisions of the NDP Act.
The National Commissioner and Chief Executive Officer of the NDPC, Vincent Olatunji, commended what he described as the legal and political commitment demonstrated by the Tinubu administration towards protecting the privacy and fundamental freedoms of data subjects in Nigeria.
Olatunji reaffirmed the commission’s commitment to supporting data-driven governance, stressing that accountability in the management of data was critical to achieving the administration’s eight Presidential Priorities.
He said the NDPC had constituted a regulatory clinic to provide technical support to MDAs and assist them in meeting their data protection obligations.
The commissioner added that the initiative formed part of a broader series of regulatory measures that would be pursued as Nigeria advances towards the frontiers of the Fourth Industrial Revolution.
