The Nigerian Government has instructed all Ministries, Departments and Agencies (MDAs) to fully implement the provisions of the Nigeria Data Protection Act (NDP Act), 2023, as part of efforts to strengthen responsible data governance, protect citizens’ personal information and promote public trust in government institutions.
The directive is contained in a Circular dated July 27, 2026 and signed by the Secretary to the Government of the Federation (SGF), Senator George Akume with reference No. Circular No. 59805/S.I/74.
Senator Akume said the circular drew the attention of all Federal Government MDAs to the directive of President Bola Ahmed Tinubu on the strategic importance of data in national development and the need to ensure its lawful processing and protection.
The SGF said President Bola Ahmed Tinubu described data as “the new oil”, stressing that data’s value is enhanced when refined and responsibly shared.
“The President directed all ministries, extra-ministerial departments and agencies to capture information rigorously while safeguarding it in accordance with the Nigeria Data Protection Act, 2023,” he said.
The circular directed all MDAs to ensure full compliance with the Act, relevant regulations, guidelines and directives issued by the Nigeria Data Protection Commission (NDPC in respect of the collection, storage, processing and management of personal data.
To this end, the Federal Government directed all MDAs to appoint suitably qualified Data Protection Officers (DPOs) to oversee institutional compliance with data protection obligations and provide guidance on lawful data processing.
The circular also requires MDAs to provide the names and contact details of their appointed DPOs to the NDPC for registration and official records.
It also said that institutions may use licensed Data Protection Compliance Organisations (DPCOs) where necessary to support implementation of compliance and to conduct statutory data protection audits.
Furthermore, the government directed all MDAs to make adequate budgetary provisions for data protection activities including staff capacity building, awareness campaigns, deployment of technological safeguards, implementation of security measures and periodic compliance audits.
Read Also: N924bn Military Salary Bill Follows Tinubu’s Approval of Pay Increase
The circular also mandates government institutions to submit mandatory Data Protection Compliance Audit Returns and other statutory reports to the NDPC within timelines prescribed by law.
To enhance accountability, the Federal Government said Permanent Secretaries, Accounting Officers and Chief Executive Officers of MDAs, would be personally responsible to ensure compliance with the circular and the provisions of Nigeria Data Protection Act.
Reacting to the directive, the National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission, Dr Vincent Olatunji, praised the administration of President Bola Ahmed Tinubu for showing strong political and legal commitment to protecting the privacy and fundamental freedoms of data subjects across Nigeria.
Dr Olatunji said data accountability was critical to achieving the administration’s Eight Presidential Priorities, saying effective data governance would improve public service delivery, enhance institutional transparency and strengthen citizens’ confidence in government.
He revealed that the Commission has also set up a regulatory clinic to give technical advice and assistance to the Ministries, Departments and Agencies as they strive to fulfill their statutory responsibilities under the NDP Act.
Dr Olatunji added that the initiative is part of a wider package of regulatory measures designed to place Nigeria in a position to take advantage of opportunities associated with the Fourth Industrial Revolution while ensuring that personal data is processed responsibly, securely and in line with global best practices.
